Hi,
I am still working on the implementation of the rules in the 
core-agent-linux package. I have a couple of additional questions:
1) Currently, I fail to understand and the inner workings the purpose of 
the 'connected_ips' part. Could you give me an overall idea of it or any 
useful additional details that you think may help me understand?
2) Since, as we talked in the previous emails, the last node needs an 
additional rule in order to forward the port from the external interface 
I am wondering how the correct interface is to be determined. I would 
automatically choose the device on which there is the route with the 
default gateway/destination. But, is it a good idea? Or would be better 
to let the user choose?
Cheers
Giulio