Adjust the v4 NAT to masquerade on every interface other than mgt.

Without this, a VM without a floating IP wouldn't be able to e.g., reach
another VM's floating IP via TCP.