[package] firewall: also set up nat reflection rules for redirects with proto all...