firewall: fix nat reflection after netifd status format change - use /lib/functions...