sounds like the full tunnel 0.0.0.0/0 issue yall were talking about, if you're using one end as a gateway