applications/luci-firewall: use neg_network_ip4addr datatype for masq_{src,dest}