The text de5707663d7a, as Debian 11 (Bullseye) shipped it.
set up masquerading (NAT) on an interface
firehol-masquerade(5) on Linux now