Restrict metadata DNAT rules to specific interfaces.