firewall: Add PUPNP chain to the nat table - required by the latest miniupnpd.