You can do NAT exclude and firewall rules manually (that's what I do too), but you can use simplified approach with
auto-firewall-nat-exclude enable
which is the case here.
You can do NAT exclude and firewall rules manually (that's what I do too), but you can use simplified approach with
auto-firewall-nat-exclude enable
which is the case here.