[NETFILTER]: Fix check whether dst_entry needs to be released after NAT