gateway set to "default" where it should be omitted
where you don't choose a gateway, e.g. leave at the default "default", the resulting rule in the config ends up with:
which breaks a variety of things. Where gateway is left at its default, it should not be set in the config at all.