Fix DNAT port remapping rules by not emitting 0.0.0.0 in --to-destination