I think I'm going to have to draw a diagram of the amprgw setup and trace the journey a packet takes going to and from it before I understand exactly what's going on. I'm no longer sure.

It could also help a lot when you separate the ampr.org system and the amprgw system, e.g. by running ampr.org (or both) in a VM.

Rob