parametrize the gateway
Ensure both directions are allowed in the firewall