action :add do
  e = execute "add masquerade to #{new_resource.zone} zone" do
    not_if "firewall-cmd --permanent --zone=#{new_resource.zone} --query-masquerade"
    command(<<-EOC)
      firewall-cmd --zone=#{new_resource.zone} --add-masquerade