NAT: Build NAT table rules

[qmonnet]

[After #470 is merged]

Following #470, we'll need to hook the functions to build the NAT tables into the configuration build in the mgmt crate.