fix: multiple nns could cause removal of nat iptables rule