Direct Access Client Internet Force Tunneling

Hi AllI have set up Direct Access with force Tunneling option. I added a Proxy entry to the nrpt and everything works fine.

Problem is that a DA Client cannot establish an RDP Connection to a Internet IPv4 Resources. I can see that a session opens in the Get-NetNatTransitionMonitoring but the Connection doesnt work.

Nat64 to internal resources works as expected.

Is this even possible? What do i need to do that DA Clients can Access ipv4 public resources?

Any adviceon what im doing wrong?

Thanks in advance!