Fix: add missing MASQUERADE target in nat_opt check from previous commit.