nat: fix forwarding handoff workaround