@mr64bit@p.mr64.net the DNAT and SNAT already works and SNAT is better for static ips, although masquerade would work also