Unable to access port in rootful mode.

### Description

I'm unable to access any containers.
A simple example would be nginx.
Bind it to 8080, and curl is unable to reach it.


### Steps to reproduce the issue

1. Run `sudo nerdctl run -d -p 8080:80 --name=nginx --restart=always nginx`
2. Run `curl localhost:8080`

### Describe the results you received and expected

I would expect the host to be able to reach the container.
Instead, it seems like it times out.

### What version of nerdctl are you using?

nerdctl version 2.0.3

### Are you using a variant of nerdctl? (e.g., Rancher Desktop)

None

### Host information

Client:
Namespace: default
Debug Mode: false

Server:
Server Version: v2.0.2
Storage Driver: overlayfs
Logging Driver: json-file
Cgroup Driver: systemd
Cgroup Version: 2
Plugins:
Log: fluentd journald json-file none syslog
Storage: btrfs native overlayfs
Security Options:
apparmor
seccomp
Profile: builtin
cgroupns
Kernel Version: 6.5.0-0.deb12.1-amd64
Operating System: Debian GNU/Linux 12 (bookworm)
OSType: linux
Architecture: x86_64
CPUs: 20
Total Memory: 30.87GiB
Name: peeriot-00X
ID: 0f398317-967c-4237-9898-5be7c24e7429

WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled