vACL: changes for gateway packet forwarding