lan: Fix broken BROUTING rule that no longer prevented router access from restricted guests (was broken in GPL 4887)