[tor-relays] iptables for relays not behind a nat