iptables-legacy -t nat support?

### Description

I have the issue with NAT rule, when I run dockerd in gvisor( with --net-raw enable).
the container in second level docker can't connect outside network at all, any idea how to make it connect outside network?
I want run dind as a ci pipeline runner in gvisor.


### Steps to reproduce

_No response_

### runsc version

```shell

```

### docker version (if using docker)

```shell

```

### uname

_No response_

### kubectl (if using Kubernetes)

```shell

```

### repo state (if built from source)

_No response_

### runsc debug logs (if available)

```shell

```