added rule for "make .private-SNAT-on"