The "Intern" field must contain the innermost
(internal net -> perimeter net -> internet) host!
(maybe this will be fixed in the future).
Intern | Extern | Direction |
$internal $PERIMETER | $any | Outgoing |
$GW | $any | Incoming |
$internal | $GW | Incoming |