netfilter: nf_nat: don't check for port change on ICMP tuples