I used the <all public ips> not 0.0.0.0 as per the...
# general
g
I used the not 0.0.0.0 as per the docs suggestion for egress gateways for this purpose. My clients can't route traffic when connected though