Hi, Not sure if this is a Tomato bug, my network setup or I'm simply confusing myself, (probably the case). I was running Tomato 1.23 but have tested the same scenario now on 1.27. In brief.... I have Zeroshell, (router, firewall, OpenVPN software), running within my network. I am testing OpenVPN and successfully make a connection internally. However when I enable a 'port forward' of UDP 1194 on Tomato, (to prepare for external testing), my connection fails. Now to make this clear this is still testing inside the network, but the connection has to bounce off the router with a static route to get to the VPN listener. When I have the port forward disabled the OpenVPN works and the log correctly identifies my laptop's IP address. When I have the port forward enabled, OpenVPN doesn't connect and the log suggests that it's the router trying to make a connection. I was under the impression that any port forwards, (unless you specify a source address), would only apply from the WAN, as per the description.....(Ext Ports - The ports to be forwarded, as seen from the WAN). So theoretically it shouldn't matter how many, or what entries I have in port forward, it should ignore them unless coming from a WAN connection. I did a 30-30-30 reset, applied the firmware, and another 30-30-30 just incase.... I'm puzzled!