at the external client i put my lan range in allowed ip's