Hi, I want to restrict the locally generated outgoing traffic from the nat gateway (cvsup, ddclient i.e. http + https, portupgrade i.e. ftp + http) to the internet. How to distinguish forwarded traffic on tun0 from the local traffic after natting? Thanks Reinhard