I could be wrong, but I think the shorewall documentation says something like "If you don't know what snat is, then you don't need it". I think masquerading is your normal nat activity.
(Just checking, you are using this linux box as a firewall/router for other machines, aren't you? If it's just the one machine you should ignore masquerading.)
|