So all of that seems to be configured just fine, question is then why I'm still not able to access my private subnet on

192.168.12.0/24

from my external client