use domain as a fallback if masquerade has no IP