Mullvad selective routing doesn't work

[Qwertylala]

Hi,

It seems like OPNsense 26.7 broke something related to how I do selective routing through Mullvad VPN. I used this guide to set it up:

https://forum.opnsense.org/index.php?topic=38550.0

I followed the guide a few months ago and it has been working perfectly with several devices but now none of them can reach the internet. I updated to 26.7 a few days ago and today was the first time I used a device that should be routed through Mullvad. I haven't changed any settings since the update except migrate the firewall rules. I can ping the devices on my LAN so they have network access at least.

The status page shows that the Mullvad tunnel is up and running and some data is sent and received (a few MB). According to Mullvad's server status page the server I'm using is working too.

Any idea where I could look for the problem?

[Sorano]

You didn't mention whether you've performed the NAT migration or not but I would start with verifying Source NAT rules (previously Outbound NAT).

[Qwertylala]

You didn't mention whether you've performed the NAT migration or not but I would start with verifying Source NAT rules (previously Outbound NAT).

Yes, there it was! I did migrate the firewall rules after the update and now when i checked the Source NAT page it was set to Automatic Source NAT rule generation, when it needs to be Hybrid. I changed to hybrid and my old Mullvad rule showed up again. Now everything works.

Is this a bug in the migration or did I miss something in the instructions?

Thanks for pointing me in the right direction.

[nero355]

or did I miss something in the instructions?

You missed this : https://forum.opnsense.org/index.php?topic=52257.0

Basically that already needed to be changed in (one of) the last release(s) of 26.1.x to avoid future issues ;)