cleanup NAT/routing entries