added comment for nat policy