proxy and masquerade at the same time