How can i migrate my vpn-scripts from f38(iptables) f39(nftables)?

[apparatus]

@smlt

i disable rc.local and start the vm manually… it worked but now the problem is: no traffic insiide when using qubes-firewall-user-script with this line

#    Accept traffic to VPN
nft 'add chain qubes output { type filter hook output priority 0; policy drop; }'

and if i change “drop” to accept" i have traffic inside vpn-vm, but can use it as proxyvm to another qube

It’s intended behavior to prevent VPN leaks and only allow the openvpn connection in the vpn-vm.
If you want to test the network in the vpn-vm then run the commands as qvpn group e.g.:

sudo sg qvpn -c "ping 9.9.9.9"