On an egress gateway, instead of entering a whole subnet, could I just enter several IP addresses on my "unique subnet" and then use IPtables on the client to map the addresses form the "duplicated subnet" to addresses on the "unique subnet" ?