With my AC68U that wasn't an issue, but I do agree with your logic, that I should perhaps use the outgoing ports from my system to avoid bleeds and not the destination ports. However, as mentioned, the router doesn't accept entries even if I use the source ports instead of the destination ports.