Firewall: Make it possible to use NAT rules with servicegroups.