Only masquerade LAN, other settings need manual tweaking