Add basic tests for Nat+Firewall

so that we can be sure that updates are fine with multiple services

NB: to be expanded in other stories, basic tests for now