SNAT: unknow protocol hairpinning fix