Add 'log' to the permissible targets of the nat table, otherwise rules
that have log as a target will result in a broken iptables configuration.