I've also discovered another issue where the external client can ping all the clients on the network except the one marked as egress