Initial support for "config nat" rules - this allows configuring zone-independant...