Also ignore errno 97.
Prepend NAT rules to avoid override by firewall.