perform a static stateless 2-way NAT with iptables