updating nat rules