yep

Ah that’s a really good point. I will have to Google this so I can learn how it is done in iptables because I’ve only ever done it with pf on OpenBSD.

I’ve never experienced any issues so far, the devices should be flushing the cache on network change in theory.