Be more explicit on the NAT rule