enable NAT mode again