Brilliant, thanks. So should my port-forward for this interface connect WAN to LAN or Mullvad to LAN? WAN to LAN makes sense, but only if I allow forwarding from LAN to WAN interfaces in the firewall. Mullvad to LAN makes sense because it's the predominant internet gateway, as such, but it doesn't allow 'normal' port-forwarding - should I pre-allocate a port in Mullvad and use that for the server if this is the case? Thanks again!