All,
OK, I've taken a look at my end, please test again, I found two issues:
- there was a phantom iptables rule preventing all outbound on the unencapsulated Public IP
- In the new script, I failed to properly add the rules for LANs on eth0. There should be a to and from rule to the network located on eth0:
TO
ip rule to <LAN/24> priority 10 ip rule from <LAN/24> priority 11
This rule must exist, exactly as noted. it should not specify a from/to your 44LAN.
- Lynwood