Tailscale on 23.05.2 not working

Hi, I tried to install Tailscale 1.58.2-1 on an Asus RT-AC85P.
Command sequence:
firstboot
reboot
opkg update
opkg install iptables-nft
opkg install tailscale

Result:

Program starting: v1.58.2-1 (OpenWrt), Go 1.21.8: string{"/usr/sbin/tailscaled", "--cleanup"}
LogID: 2eb7905024137c61600763765ba07c1d4f13bfb2e0e367ab54b91c2df85b2fcf
logpolicy: using system state directory "/var/lib/tailscale"
logpolicy.ConfigFromFile /var/lib/tailscale/tailscaled.log.conf: open /var/lib/tailscale/tailscaled.log.conf: no such file or directory
logpolicy.Config.Validate for /var/lib/tailscale/tailscaled.log.conf: config is nil
dns: [rc=unknown ret=direct]
dns: using "direct" mode
dns: using *dns.directManager
deleting [-j ts-input] in filter/INPUT: running [/usr/sbin/iptables -t filter -D INPUT -j ts-input --wait]: exit status 2: iptables v1.8.8 (nf_tables): Chain 'ts-input' does not exist
Try iptables -h' or 'iptables --help' for more information. deleting [-j ts-forward] in filter/FORWARD: running [/usr/sbin/iptables -t filter -D FORWARD -j ts-forward --wait]: exit status 2: iptables v1.8.8 (nf_tables): Chain 'ts-forward' does not exist Try iptables -h' or 'iptables --help' for more information.
deleting [-j ts-postrouting] in nat/POSTROUTING: running [/usr/sbin/iptables -t nat -D POSTROUTING -j ts-postrouting --wait]: exit status 2: iptables v1.8.8 (nf_tables): Chain 'ts-postrouting' does not exist
Try `iptables -h' or 'iptables --help' for more information.
linuxfw: clear ip6tables: exec: "ip6tables": executable file not found in $PATH
flushing log.
logger closing down

Then I'm able to start Tailscale but when I try to connect to LUCI from another machine (that worked in the past) in the System log I see this:

Thu Mar 28 10:20:28 2024 daemon.err tailscaled[6564]: 2024/03/28 10:20:28 Drop: TCP{100.116.99.99:64908 > 100.105.99.99:80} 52 no rules matched
repeated some times.

I tried also to install kmod-ipt-nat how suggest but without success.
Any thought? Thanks
Nic

I also used TS_DEBUG_FIREWALL_MODE=nftables but seems to be ignored: the daemon searches for iptables...