netfilter: nat: never update the UDP checksum when it's 0