Meh, overly complicated solution to a problem that could have been solved with a few lines of iptable config.