[package] firewall: add basic NAT reflection/NAT loopback support