network: firewalld: native support for NAT/routed