[puppet] Actually, dnat done already on puppet master