9.1 masquerading and firewall oddities