netfilter: tcp conntrack: fix unacknowledged data detection with NAT