Hello, I added a rule that from DMZ a connection can be established to the server on the internet - this works. But the response will not be forwared back from the WAN interface to the DMZ interface. :-( Mar 23 16:59:03 Router forward: in:etherx - WAN out:ether - DMZ, src-mac xx, proto UDP, serverIP...