Kernel 2.4.4 + iptables + masquerading: ident-forwarding?