On reboot, the routing service overwrites net.inet.ip.forwarding, so the value
in /etc/sysctl.conf isn't relevant.
Here the relevant code from /etc/rc.d/routing on FreeBSD 13.1p5:
if checkyesno gateway_enable; then ropts_init inet echo -n ' gateway=YES' ${SYSCTL} net.inet.ip.forwarding=1 > /dev/null else ${SYSCTL} net.inet.ip.forwarding=0 > /dev/null fi
So, as documented in the handbook, the expected configuration
is by setting the gateway_enable variable.
This change partially reverts 6deb32e01378 / D2596.