snat: fix port allocation