no nat is no longer legalconvert nat/rdr/binat rules to nat-to/rdr-to/binat-to
test binat and tagging