Nat traffic correctly for the headnodes.
Allow dhcp/dns traffic from the headnodes to the host.