Merge f294adf5f6 into bbe50b3abc

source/manual/how-tos/wireguard-selective-routing.rst

@@ -196,11 +196,13 @@ The step has two parts - first creating a second Alias for all local (private) n
 - **Save** the rule, and then click **Apply Changes**
 - Then make sure that the new rule is **above** any other rule on the interface that would otherwise interfere with its operation. For example, you want your new rule to be above the “Default allow LAN to any rule”
 
---------------------------
-Step 9 - Configure routing
---------------------------
+--------------------------------------------------------------
+Step 9 - Configure routing for traffic generated by the router
+--------------------------------------------------------------
 
-- Then go to :menuselection:`Firewall --> Rules --> Floating`
+Services running on the router and configured to use the VPN interface will generate traffic using the VPN address as the source IP. This traffic has to be routed to the VPN gateway. Note that locally generated traffic is not affected by NAT or by the firewall rule created in Step 8.
+
+- Go to :menuselection:`Firewall --> Rules --> Floating`
 - Click **Add** to add a new rule
 - Configure the rule as follows (if an option is not mentioned below, leave it as the default). You need to click the **Show/Hide** button next to "Advanced Options" to reveal the last setting: