There is "iifname "wwan*" drop" defined in 01_wwan.nft, which drops any not "established, related" incoming packet from WWAN. [ci:skip-build]: already built successfully in CI