Port based routing won't work

[Kees17760]

Hi All,

I use a WireGuard connction for all outbound traffic, but would like to keep usenet downloads (port 119 and 443) for a certain client routed via WAN (don't want the extra encrypting/decrypting).

I followed part of the instrucions here: https://github-wiki-see.page/m/RMer...iki/Policy-based-Port-routing-(manual-method)

Created /jffs/scripts/nat-start (Yes, it has mod 755) and enabled script processing via GUI (scripts do run).

Added rule:
ip rule add from 0/0 fwmark "0x8000/0x8000" table main prio 9990 # WAN fwmark

tried both IP Address base:
iptables -t mangle -A PREROUTING -i br0 -m iprange --src-range 192.168.30.105 -p tcp -m multiport --dport 119,443 -j MARK --set-mark "0x8000/0x8000"

As wel as MAC address base
iptables -t mangle -A PREROUTING -i br0 -m mac --mac-source xx:xx:xx:xx:xx:xx -p tcp -m multiport --dport 119,443 -j MARK --set-mark "0x8000/0x8000"

However both methods won't work for me. Newsreaders and Outlook can't connect to WAN anymore. Am i missing something and/or are there more elegant/safe ways to achieve this?