def build_firewall_rules(services, cfg):
	rules = []
	for s in services:
		if "nat" in s.exposure:
			rules.append({
				"service": s.name,
				"allow_port": s.public_port,
			})
	return(rules)