[#68280556] Add DNAT rule for NRPE

To support the firewall rule in ed146e9. Needs to be forwarded from the
external IP on the VSE to the machine's internal IP.