Yep, that's exactly what I'm trying to do, but it doesn't seem to work. I've tried adding the any-trusted to the same rules, tried creating a new rule with just the any-trusted to the snat policy, and ...