iptables save nat to squid rules