Fix #2887, based on NAT states that will be killed, also kill firewall states for same source and destination