netfilter: nf_nat: handle NF_DROP from nfnetlink_parse_nat_setup()