Specify warden host IP in NAT rule

  * prevents requests to same port as container from hairpining

[finishes #60715516]

Signed-off-by: Aram Price <aprice@pivotallabs.com>