I agree that MSG instructions are more likely to be the root cause of the problem. Code doesn't just change after a few hours.
Check to be sure there is no logic modifying the DH+/DF1 passthrough enable bits.
Check the PanelView terminal programs to see what the DF1 destination node numbers are. Really, they should all be Node 1 talking to Node 0, because DF1 point to point ignores destination node numbers.
I don't see a way for an SLC-5/04 to turn on passthrough and invent a target address that's not in the packet.
But then, this morning a man came out of the woods next to my house carrying a ukulele case and wearing a rubber ape mask. So nothing really surprises me anymore.