interface: enable NAT on interfaces by default