act_nat: fix the wrong checksum when addr isn't in old_addr/mask