Tailscale exit nodes still aren’t working properly. Router can (and does) pass traffic to exit node and can access internet, and is pingable over tailscale, but LAN clients can’t reach the internet over the tailscale exit-node, or ping any other tailscale node.
–accept-routes --exit-node and --exit-node-allow-lan-access all specified on cli.