Hi @FLOOD , I assume you mention another approach, right? And yes, such a rule is placed in my config, but is below the other rule I changed. In general it might be possible for sure to check whether this rule fix it as well, but since I don’t know all dependencies and reasons of the current working sequence, I won’t change, esp. since I have a working one already, which deal with a least “whole” in the wall using private IP. Apart from this, even the rule controlling the TCP stream is available already, it doesn’t go with Trusted Network. To make it working I suppose to create a new rule, same purpose but for the home network. In result I would have two separate rules for TCP-Stream and I would get knowledge about the correct sequence to get it working AND still being protected. Or is there a possibility to backup all the rules in its sequence and then restore after playing around? Thanks & Regards Marze