adjusted some rules for masquerading and forwarding