should there be a nat rule in iptables for the networks?