Finally a working shorewall configuration. Used wrong interface in masq :(