Activating Routing without Masquerading
I come from CentOS 7 and didn't have this problem.
I have a "Router" that essentially is a PC with 4 network adapters.
Presently I have 3 used network adapters: WAN connected to the ISP as Bridge (Dynamic IP), Local NetWork (192.168.1.254) and the 3rd adapter (192.168.2.254) that goes to a secundary NetWork that has it's own router.
In the previous CentOS (7), I just had to set the routing table to forward the traffic the was targeted at that secundary NetWork with something like this:
route add -net 192.168.3.0/24 gw 192.168.2.253
And the router in that secundary network would have the default gateway as 192.168.2.254
Presently, to activate the routing it seems that I have to activate the option "Masquerade Zone" in the Firewall Configuration, but this causes problems because it seems to masquerade traffic that it shouldn't... I'm able to get traffic into the secondary NetWork, but not the other way around and when I do a netstat in that network I see that the connections from the Local NetWork have a source address of 192.168.2.254 instead of 192.168.1.x
How can I enable routing without masquerading for a zone?