firewall: - simplify masquerade rule setup - remove various subshell invocations...