I think I'm going to have to draw a diagram of the
amprgw setup and
trace the journey a packet takes going to and from it before I
understand exactly what's going on. I'm no longer sure.
It could also help a lot when you separate the
ampr.org system and the amprgw
system, e.g. by running
ampr.org (or both) in a VM.
Rob