> that are also assigned to the interface at which any given packet arrives. This solved my issue. Thank you so much Kerin! I actually never understood the meaning of daddr . iif, but thanks to your detailed explanation, it now clicked. (Previous mail somehow got rejected, resending it)