diff --git a/src/debian/debian_ts_nftables.conf b/src/debian/debian_ts_nftables.conf
index d86cfa8..18e1915 100644
--- a/src/debian/debian_ts_nftables.conf
+++ b/src/debian/debian_ts_nftables.conf
@@ -29,7 +29,7 @@ table inet router {
         ct state invalid counter drop comment "defconf: drop input flows with invalid conntrack state"
         tcp flags & (fin | syn | rst | ack) == syn counter jump syn_flood comment "defconf: rate limit TCP-SYN packets"
         iifname "eth0" jump input_lan comment "defconf: handle LAN IPv4 / IPv6 input traffic"
-        iifname "tailscale0" jump input_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 input traffic"
+        iifname "tailscale0" counter jump input_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 input traffic"
     }
 
     chain forward {
@@ -38,7 +38,7 @@ table inet router {
         ct state established,related accept comment "defconf: allow forwarded established and related flows"
         ct state invalid counter drop comment "defconf: drop forward flows with invalid conntrack state"
         iifname "eth0" jump forward_lan comment "defconf: handle LAN IPv4 / IPv6 forward traffic"
-        iifname "tailscale0" jump forward_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 forward traffic"
+        iifname "tailscale0" counter jump forward_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 forward traffic"
     }
 
     chain output {
@@ -47,7 +47,7 @@ table inet router {
         ct state established,related accept comment "defconf: allow outbound established and related flows"
         ct state invalid counter drop comment "defconf: drop output flows with invalid conntrack state"
         oifname "eth0" jump output_lan comment "defconf: handle LAN IPv4 / IPv6 output traffic"
-        oifname "tailscale0" jump output_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 output traffic"
+        oifname "tailscale0" counter jump output_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 output traffic"
     }
 
     chain prerouting {
@@ -92,12 +92,12 @@ table inet router {
     }
 
     chain forward_tailscale {
-        jump accept_to_lan comment "tsconf: accept Tailscale to LAN forward"
-        jump accept_to_tailscale
+        counter jump accept_to_lan comment "tsconf: accept Tailscale to LAN forward"
+        counter jump accept_to_tailscale
     }
 
     chain output_tailscale {
-        jump accept_to_tailscale
+        counter jump accept_to_tailscale
     }
 
     chain accept_from_tailscale {
@@ -115,7 +115,7 @@ table inet router {
 
     chain dstnat {
         type nat hook prerouting priority dstnat; policy accept;
-        iifname "eth0" meta l4proto { tcp, udp } th dport domain counter jump dstnat_lan comment "defconf: handle LAN IPv4 / IPv6 dstnat traffic"
+        iifname "eth0" meta l4proto { tcp, udp } th dport domain jump dstnat_lan comment "defconf: handle LAN IPv4 / IPv6 dstnat traffic"
     }
 
     chain srcnat {
@@ -129,7 +129,7 @@ table inet router {
     }
 
     chain srcnat_lan {
-        meta nfproto ipv4 masquerade comment "defconf: masquerade IPv4 LAN traffic"
+        meta nfproto ipv4 counter masquerade comment "defconf: masquerade IPv4 LAN traffic"
     }
 
 
@@ -168,8 +168,6 @@ table inet router {
 
     chain mangle_forward {
         type filter hook forward priority mangle; policy accept;
-        iifname "eth0" tcp flags syn tcp option maxseg size set rt mtu comment "defconf: zone LAN IPv4 / IPv6 ingress MTU fixing"
-        oifname "eth0" tcp flags syn tcp option maxseg size set rt mtu comment "defconf: zone LAN IPv4 / IPv6 egress MTU fixing"
     }
 
 }