Disabled NAT rules vs. disabled Firewall rules