From 60afb154885897bdb9c7170896210c62941a6856 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mattias=20Walstr=C3=B6m?= <lazzer@gmail.com>
Date: Sun, 7 Jun 2026 11:52:15 +0200
Subject: [PATCH] Changelog: Add note about firewall changes

Enable NAT no longer enable forwarding on *all* interfaces.
---
 doc/ChangeLog.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/doc/ChangeLog.md b/doc/ChangeLog.md
index 956c7935..5e9855ce 100644
--- a/doc/ChangeLog.md
+++ b/doc/ChangeLog.md
@@ -18,6 +18,12 @@ All notable changes to the project are documented in this file.
 - Add `legacy-rates` option to re-enable 802.11b rates on 2.4 GHz for
   old IoT devices (disabled by default)
 
+### Fixes
+
+- Firewall masquerade no longer enables the global IPv4/IPv6 forwarding
+  sysctls.  You must now enable IP forwarding explicitly on the interfaces
+  that should route traffic; enabling NAT alone is no longer enough
+
 [wifi]: wifi.md
 
 [v26.05.0][] - 2026-05-29