Updated package-selections.
Made masquerade add/drop bit more careful (now just handling src+dst=0.0.0.0/0 rules). Also made IP forwarding enable on start, but may leave it on at stop (if something else on the host requires it).