[A] add FORWARD/INPUT chain to nat