iptables -t mangle -I PREROUTING -s "DeviceIP" -j RETURN
iptables -t mangle -I PREROUTING -i pppoe-wan -j RETURN

• Exclude from VPN

  ip rule add from "DeviceIP" table 4
  ip route add default dev pppoe-wan table 4
  

Make a device with an IPv4 address bypass the transparent proxy