@User i know in your case you're already manually adding allowedips, so it might be worth just removing the gateway altogether and just putting in the appropriate allowedips + postup/postdown rules