Masquerade all outgoing bridge traffic if ICC

addresses Issue #5384
This means we lose the source address information, because all traffic going from the outside to the containers will be MASQUERADE'd to the bridge address.