@DTS Engineer it seems like setting both as suggested as a safe option, makes it impossible to connect to the same server from either local IP or via a public port-forwarded IP/hostname. E.g. when the router doesn't support hairpin loopback, and the user needs to manually shift between LAN and WAN adresses for old legacy servers/devices. Is it really not possible to disable ATS for WAN connections for user specified IPs/hosts?