cp    /usr/share/doc/shorewall/default-config/masq    /etc/shorewall/masq

#INTERFACE     SOURCE          ADDRESS
eth0           loc_net         wan_ip