in the case of an egress gateway ... when the egress receive a packet on the netmaker interface intended for the egress range .... ip_forwarding passes it to the network interface that is on the egress range ...... and the NAT iptables rules say.. change the source ip of the packet to my interface so the machine on the lan will send replies back to the egress gateway