Hello, long time no see.
I just had recently the same issue I had more than 1 year ago, and while searching on the web i found out this, which is my own post. Doing what @bnthn mentions didn’t fix the issue, however, I found another post > Ip_whitelist.go:70 > Rejecting IP 172.28.0.1 - #18 by alexus which solution truly fixed my issue, apparently is a tailscale issue, you have to run this command:
sudo tailscale set --snat-subnet-routes=false
Hope this helps somebody else