Allow selection of SNAT/MASQUERADE in firewall