nat: revert fix dual-loop tcp checksum botch