And this Is where you can visually see the possible paths of packets, in and out:
As a side note, I am not sure that It can be adapted to your case, and I don't know if It Is right, but It works just fine for me:
Attempting to evolve from caveman's failover
Attempting to evolve from caveman's failover - #37 by jaclaz