you can do forwarding without masquerading