Update before.rules.j2

Fixed before rules. Forgot to add -t nat