I think that the problem is that your proxy replies with it’s own address (192.168.1.100) to clients. Make sure that it replies with original destination ip to client (reply to client must be from the same address that client used as destination). Of course you need to forward correctly this on routerboard.
Also I can’t understand the first firewall rule. Why are you filterning in nat / dstnat chain, not in filter forward? And it’s strange name for address-list - 192.168.1.123 . Maybe you want to use just single src-address, not address list?