From 210a360797b8d678933cde5bb71b00a5ce876665 Mon Sep 17 00:00:00 2001
From: Kroese <kroese@users.noreply.github.com>
Date: Sun, 12 Jul 2026 13:18:52 +0300
Subject: [PATCH] fix: Restore compatible NAT forwarding rules (#1247)

---
 src/network.sh | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/src/network.sh b/src/network.sh
index c9399fb..333c1f3 100644
--- a/src/network.sh
+++ b/src/network.sh
@@ -964,22 +964,10 @@ configureTables() {
     warn "$tables_err" && return 1
   fi
 
-  # Allow newly DNATed connections to the guest
+  # Allow forwarding from dev -> guest
   if ! iptables -A FORWARD \
     -i "$DEV" \
     -o "$BRIDGE" \
-    -d "$ip" \
-    -m conntrack --ctstate NEW --ctstatus DNAT \
-    -m comment --comment "$rule_tag" \
-    -j ACCEPT; then
-    warn "$tables_err" && return 1
-  fi
-
-  # Allow return and related traffic
-  if ! iptables -A FORWARD \
-    -i "$DEV" \
-    -o "$BRIDGE" \
-    -m conntrack --ctstate RELATED,ESTABLISHED \
     -m comment --comment "$rule_tag" \
     -j ACCEPT; then
     warn "$tables_err" && return 1