The MASQUERADE optimization for mostly static IPs is broken
and can't be fixed in a reasonable way, also makeing sure
conntracks aren't deleted when the address stays the same
can be done entirely in userspace with the old behaviour.
This patch reverts to the old behaviour.