Still the TCP rules should ensure the pass works. Thus I would recommend to proceed with Step 2 and 3 from my last post.