What the deuce?
Set IP_FORWARDING=Keep always