All,
OK, I've taken a look at my end, please test again, I found two issues:
- there was a phantom iptables rule preventing all outbound on the
unencapsulated Public IP
- In the new script, I failed to properly add the rules for LANs on
eth0. There should be a to and from rule to the network located on eth0:
TO
ip rule to <LAN/24> priority 10
ip rule from <LAN/24> priority 11
This rule must exist, exactly as noted. it should not specify a from/to
your 44LAN.
- Lynwood