On Wed, Aug 17, 2016 at 3:41 AM, Phillip Smith <fukawi2@gmail.com> wrote:

Perhaps include "source" to highlight it's the addresses allowed from the other end of the tunnel, which also splits the lowercase l (and the lower "d") next to capital I

Except it's not just source. It checks src when receiving and consults dst when sending.