continuous-integration/drone/push Build is passing
Remove continue statements after applying FORWARD and NAT rules so a single policy can specify both `from` and `nat` fields. Previously only the first matched rule was applied and subsequent ones were skipped. Also guard the unhandled-pattern warning to only log when both fields are empty, preventing false warnings.