my silly little projects

[gorzek]

OK, I confirmed I really can't make this work without the first layer, because trying to do it based on the dynamic DNS name alone results in the following behaviors:

• Calling the proxy manager from outside my network works (more or less; doesn't quite do what I want but I can definitely reach the proxy manager and get past my router)
  
• But calling it from inside my network via the DDNS name gets a straight refusal.
  

So, I'll have to contend with that to make this thing work, but should be doable.