Add a rule to masquerade container -> container traffic, to make it work for now.