Thank you, team, for such a quick response to my request. I have not even had the chance to test it yet but trust that this will work perfectly. Again, many thanks!

PR: https://github.com/vyos/vyos-1x/pull/1306

I did this change as you mentioned and it worked, , example:

PR https://github.com/vyos/vyos-1x/pull/1305

@RyVolodya could you recheck it?

Try to replace option restart to reload-or-restart and re-configure from scratch, it may help.
https://github.com/vyos/vyos-1x/blob/363ecfa46cdb8402ea71637717863f01b09f428b/src/conf_mode/protocols_nhrp.py#L107

Hub basic setting :

Yes ,you need to reload the services and it works , here's an basic example with the current configuration :

It is not only for dhcp, any service can be affected to this
There are no many check when we remove interface

@fernando Does it work if you "reload" configuration?

Works as expected

PR for 1.3
https://github.com/vyos/vyatta-op-vpn/pull/33
https://github.com/vyos/vyos-1x/pull/1303

@pyaskowski try zone-policy firewall

Fixed VyOS 1.4-rolling-202204260601

set nat source rule 10 destination port '!22,telnet,http,123,1001-1005'

nft:

oifname "eth4" tcp dport != { 22-23, 80, 123, 1001-1005 } counter packets 0 bytes 0 masquerade comment "SRC-NAT-10"

VyOS 1.3.1-S1 is not affected:

table ip nat {
	chain PREROUTING {
		type nat hook prerouting priority dstnat; policy accept;
		counter packets 1 bytes 112 jump VYATTA_PRE_DNAT_HOOK
	}

PR https://github.com/vyos/vyos-1x/pull/1302

Has there been any movement on this? I've been following for a while since I've noticed the behavior myself and am hoping it can be resolved at some point.

PR https://github.com/vyos/vyos-1x/pull/1301

PR https://github.com/vyos/vyos-1x/pull/1300

Working fine in VyOS 1.4-rolling-202204250217

PR https://github.com/vyos/vyos-1x/pull/1299