That was it! I messed around with the port-forward settings with no luck in the past. Disabling the “Masquerade” option in the firewall settings for the server’s VLAN worked. Thanks a bunch.

Both.

Thanks. I have been lurking ever since Reddit’s third-party client shenanigans, actually. 😅

The Android client has a recurring bug where the connection to the Tailnet and the DNS break about half the time when switching between Wi-Fi and cellular networks. Plus, I can’t use it and a VPN at the same time.

I can remedy that by toggling the connection off and on from the notifications panel, but it still keeps breaking with stuff that use a persistent connection, like ntfy (a UnifiedPush server).

Yeah, it is the proxy. Same is true for SSH, though.