Stopping or restarting the Tunnelbroker DDNS client removes any custom changes made by firewall-start. This can happen for example when the WAN interface is bounced or in some circumstances at boot.
Thanks. Should be fixed with 71732c5a66, however I can only pass the primary wan interface as argument at that point as stop_ddns() has no wan unit context to supply to the script.