firewall: correctly rewrite DNS packets originally for local network.