implicit public NAT for first nic/en0 -- commented out