[Arnavion]

For NTP, an alternative is letting the LAN devices connect to whatever NTP server they want to, and just NAT'ing outgoing udp/123 to your NTP server.

[magicalhippo]

Well yes, but that's a suboptimal hack.