> i want to shape traffic for my clients and do not know what behaviour to > choose... > in your example will it be possible to match NATed addresses of my clients ? you want to match the translated addresses of your clients (-> external IP) - then BA is the correct behaviour.