snat: add support for connlimiting port-range SNAT