netfilter: xt_nat: fix DNAT target for shifted portmap ranges