Copy and paste sorted. I had to add a custom rule even though it should have worked without it.

Also, loving that I can set the firewall to only connect with the 4 sites I will use that qube for. Pretty slick