I mucked around with something and now I get GATEWAY timeout. I can still NAT to it though.