Startup and tear down NAT rules correctly