It looks like that the rules will be rewritten when you delete all of the postup/down commands. If you leave for example ipforeward in the field and just delete the masquerade command it works.