Hi all,
I'm new to OPNsense but learned a lot recently and using it as my main router now.
On my laptop I have a Mullvad VPN Wireguard connection set up with AllowedIPs restricted to the SOCKS5 proxies I want to connect to (10.64.0.1/32,10.124.0.0/16). That way, only applications that I configure to use a Mullvad SOCKS5 proxy will go through the Wireguard connection, as desired.
Now I'm trying to achieve the same on the router level, so all devices can use the Mullvad SOCKS5 proxy without maintaining their own VPN connection.
I configured WireGuard MullvadVPN Road Warrior Setup (https://docs.opnsense.org/manual/how-tos/wireguard-client-mullvad.html) but instead of 0.0.0.0/0, I configured 10.64.0.1/32,10.124.0.0/16 as the peer's Allowed IPs. The Wireguard connection is up and Mullvad IPs (e.g. 10.64.0.1 or 10.124.2.67) can be pinged from OPNsense.
I also assigned an interface for The Mullvad Wireguard connection and see on the firewall logs that connections from my laptop to the Mullvad SOCKS5 pass. But connections from apps that have a Mullvad SOCKS5 proxy configured (e.g. 10.64.0.1:1080 or 10.124.2.67:1080) time out.
Thanks in advance for pointing me into the right direction.