refine FORWARD with clienthello