Portfoward from WAN to lan

[b-reich]

I am using the tunnle as default route 0.0.0.0/0.
Now I try to reach a service which is accessible over portfoward (https traffic on 443) on the wan interface (and dyndns) it wont work.
Do you have any clue?

I think there is something broken with the NAT.