The bridge gateway (10.89.3.1) lives in the rootless netns; llama-server runs in the host netns, so the gateway refuses. 192.168.0.143:52625 reaches it through the rootless NAT (verified from the container). Same LAN-IP pattern the doc already prescribes for the Dankserver backend.