Per-jail NAT functionality and rules added