fix for 1:1 NAT