ye, removed the postup/postdown lines, and flushed all the iptables rules on the "egress gw" and now it routes traffic both ways 😄