[package] firewall: fix nat reflection after netifd switch (#11460)