The text e78db948c30b, as Debian 9 (Stretch) shipped it.
set up masquerading (NAT) on an interface
firehol-masquerade(5) on Linux now