[NETFILTER]: Fix xfrm lookup after SNAT