update iptables nat table