Apply SNAT only for traffic coming from containers

This change contains a hard-coded subnet to apply SNAT for, which needs
to be made configurable later.

Change-Id: Ifb54efbaff849bad41023356b38acf54f1bdd7cb
Merge "Apply SNAT only for traffic coming from containers"