this configuration works for external on eth0, on lan 192.168.1.0/24