correct bug in previous commit; affects forward_with_snat()