Reworked iptables rules for destination NAT and Inline Layer 3