aozb,
Do you have access to the gateway machine? I am asking because the lines you mention must be written in a configuration script in the gateway machine, not in your machine.
A configuration script is in fact any script you must run to configure the NAT/Firewall. I don't know if there is a nice place to put this so that it is automatically run on boot. Maybe some debian guru can help here.
Cheers!