@5f9bb1a8 Interesting setup however far beyond my current knowledge on BSD. I primarily use OPNSense running on BSD. Easy of use for sure, but this approach seems more flexible 

 @0abab07e OPNSense is a very good solution. Here, I wanted to have a lightweight and totally flexible solution, without any gui. 

 @5f9bb1a8 Ok, is there a guide you followed or just common sense and Linux/firewall knowledge? 

 @0abab07e No guide, I've created it following my experience. I'm writing a post for my blog about it, but it's been delayed for months as I haven't enough time to complete it 😞