applications/luci-firewall: fix turning off nat reflection