Properly route floating IP traffic between VMs on tenant networks.

Jeremy noted that we should generalize this into a single rule using `! -i eth0`  I'm going to do so in a subsequent commit.