pfSense pkg traffic via VPN route

[Zzzeebe]

In a leased office, I’m crossing a multi tenant public education network with aggressive filtering and a MITM type content gateway that breaks SSL. Consequently, I send all outbound traffic over an openvpn tunnel to a service for internet egress and to permit SIP inbound.

Yet pfSense PKG traffic is still going out wan port rather than VPN, and I can’t identify the best way to redirect it. Resolved part of the issues by shifting all DNS to TLS, but foreign content filter breaks certificate path so HTTPS doesn’t work.

What is the best approach to redirect pkg from pfSense?!