do i neew fw_masq_nets for masquarading to VPN?