to me it looks like an issue that should be solved using fw rules