only thing I can think of is that the gateway was created with an old version of netmaker/netclient (that is the postup/postdown rules where generated before the upgrade).... I think the only way to fix is to remove the gateway and recreate it