firewall: insert SNAT and DNAT rules according to the order of the configuration...