APP ip Routing

Hi All, I recently configured an app from the catalogue with an alias IP. The app works as advertised. Using a Tom Lawrence video as reference, I also have a pfsense firewall that I’ve configured with a VPN gateway with kill switch. This also works as expected as when I add a client’s IP address to an Alias defined on the firewall, all traffic for that client is routed to the VPN gateway.

My problem is that this does not seem to work for Truenas Apps. When I add the app’s IP to the pfSense Alias list and I curl (ip.wtf) from the app’s shell, I still get my isp ip. Can anyone please tell me what bonehead misconception I have about how Truenas networking works? :joy:

Thanks!