nat: avoid hairpinning infinite loop problem