[This is a feature request, if this is the wrong category for it, I am sorry in advance]
Hello,
could you include the TRACE target in the iptables you have on the TO? It allows for some nice firewall debugging and could also make some questions in this forum easier to answer.
Thanks!