It's the killswitch, it affects all packets from hosts listed in "under_vpn" list, including those to other local subnets. Your modification kind of breaks the killswitch, because it now works only for packets with connection-mark=under_vpn, but you set that when first packet goes out, so...

Hi, have a bit of a problem to get it working with multiple VLANs. So, I tried some tweaks but I'm a bit confused, so I like some inputs. For if I understand the packet flow it should not work but it does. Or I think it does, for I get the result I want. But as you see below here, I have put in some...

Thank you icsterm, I will give a try... However, as long as I remember correctly, one problem I experienced was even using mangle to mark connections, I was not able to "intercept" and mark IPSec connections towards NordVPN :( EDIT: To make things simplier I started over, reset the router...