firewall: fix green only mode.

disable masquerade and green IP/NET check if internet is
connected via green.