netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN