firewall: Apply destination NAT rules for the firewall itself, too.