Use masquerade in postrouting