Reapply SNAT/MASQUERADE rules on firewall reloads