Note: I'm not using NAT for this setup, all addresses to be specified are real.
I think!