Thanks, but it didn’t make any difference except UDP traceroute/mtr is now also going via the VPN. I’ve tried with and without passthrough