I never tried before, but wan SNAT could be disabled with a template-custom:
mkdir -p /etc/e-smith/templates-custom/etc/shorewall/masq
> /etc/e-smith/templates-custom/etc/shorewall/masq/20red
Then rebuild and restart the firewall:
signal-event firewall-adjust
Please, let me know how it goes. Thanks.