fix: apparently some iproute2 versions don't take nat0 up automatically