ok...
You've got lots of issues, I'll try to address them:
First, don't use a massive network /8 for your lan. Change it to a /24. Remvoe the DNS and the ip6class. Your lan should look like this:
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ip6assign '60'
option ipaddr '10.0.0.1'
option netmask '255.255.255.0'
Remove the bridge and wlan0 from your wwan network... I'd also remove the peerdns '0' from there (at least for now). it'll look like this:
config interface 'wwan'
option proto 'dhcp'
I'd remove the wwan6 entirely, unless you actually need IPv6.
Remove this:
Your NoVPN network needs an address, and it must not be defined as a bridge in the network interface stanza (you need to do that in a special stanza. It should look like this:
[quote="firefoxOnFire, post:5, topic:163380"]
config device
option name 'br-novpn'
option type 'bridge'
config interface 'NoVpn'
option proto 'static'
option ipaddr '10.0.5.1'
option netmask '255.255.255.0'
option device 'br-novpn'
You need a dhcp server for the novpn network.
config dhcp 'NoVpn'
option interface 'NoVpn'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
Turn off masquerading on the lan firewall zone... it should look like this:
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
And then edit your ovpn zone to look like this:
[quote="firefoxOnFire, post:5, topic:163380"]
config zone
option name 'ovpn'
option input 'ACCEPT'
option output 'ACCEPT'
option masq '1'
option mtu_fix '1'
option forward 'ACCEPT'
list network 'opvpn'
Then make sure your policy based routing is correctly configured.