nat: fix ICMP error translation