rewrite nat role & used it in openvpn role
fix typo, fix mtu problem
Merge pull request #2 from ftao/better-nat

Better nat