title: OPN Sense NAT - IPSec Stack
body: <p>We are trying to get NAT working trough an IPSec Tunnel.
  We have made a BINAT 1:1 rule but after applying the changes the traffic goes to the WAN interface because it doesn't know where to go.
  My question is, which is the order of the STACK? Does it NAT first or go to IPSec and then it NATs?</p>