Did some tests with tcpdump. i can see ICMP traffic enter on the nm interface, and leave on the eth0 interface. But when I try a tcp connection (with nc) I see the SYN packet arrive on the nm interface, but not forwarded anywhere. It is not visible on eth0. So tcp packets are not forwarded...