What a coincidence - that's exactly what I did too, except I used IPTables and just PATed the connections.