From 764a186836b9c97bcda72c25efee0df3a47cb5a0 Mon Sep 17 00:00:00 2001
From: Kroese <kroese@users.noreply.github.com>
Date: Sat, 11 Jul 2026 11:58:35 +0300
Subject: [PATCH] feat: Allow all forwarded NAT traffic (#1245)

---
 src/network.sh | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/src/network.sh b/src/network.sh
index a480340..ba6ba45 100644
--- a/src/network.sh
+++ b/src/network.sh
@@ -960,11 +960,10 @@ configureTables() {
     warn "$tables_err" && return 1
   fi
 
-  # Allow return traffic
+  # Allow forwarding from dev -> bridge
   if ! iptables -A FORWARD \
     -i "$DEV" \
     -o "$BRIDGE" \
-    -m conntrack --ctstate RELATED,ESTABLISHED \
     -m comment --comment "$rule_tag" \
     -j ACCEPT; then
     warn "$tables_err" && return 1
@@ -1395,7 +1394,7 @@ showHostInfo() {
   [[ "$nameservers" == "127.0.0.1"* ]] && nameservers=""
 
   echo
-  
+
   if (( ${#nameservers} <= 40 )); then
     [ -n "$nameservers" ] && line+="  |  DNS: $nameservers"
     echo "$line"