cnat: Introduce parametric source policy