I have followed every step in this to the letter and even double checked everything. Last night when I first set it up I got moderate NAT instead...
Separate names with a comma.