That's not the end, it only allows to connect to socks server from LAN via WAN ip, but when i try to connect from outside - it fails to connect. So, what I want - i want to connect to proxy port from external ip, and all other traffic - except local - goes to VPN. So... add action=mark-routing chain...

Ok, I get it. The problem was in VPN. I've used Mangle to mark routing from that machine to vpn interface, so it also routed it's answer to proxy connection. Rule was add action=mark-routing chain=prerouting new-routing-mark=vpn passthrough=no src-address=192.168.1.104 I changed it to add action=mar...

It's very hard to find solution, because when I ask Google "mikrotik + socks +..." i receive a lot of information about internal RouterOS socks proxy. I have SOCKS5 docker image, which is running normally at 192.168.1.104:32080, when i try smth like curl --socks5-hostname 192.168.1.104:320...