You need to test your work, again
Name resolution: $ host freebsd.org should work from the gateway and any host in your local net
Remote login: $ ssh myotherbox.com should work from the gateway and any host in your local net
Surf the web: $ lynx http://www.openbsd.org should work from the gateway and any host in your local net
Connections from your net to $client_out elsewhere should work
All other connections from your net should FAIL
Connections from elsewhere to your net should NOT work