I cannot for the life get it to route on OPT interface via manual outbound NAT to VIP on WAN parent interface…. Nothing works. Inbound is fine and routing as it should. Outbound is only via WAN. In the same second you switch outbound nat to VIP IP then it hangs outbound. Inbound still works...even routing on the VIP's.

here's an update. pfSense work if the website is in static html pages but if you place a wordpress cms behind pfsense then NAT starts to fail. This is what i have encountered.  For some reason there should be a specific port that need to be enabled for wordpress be available to the public. Right after wordpress  setup connects to mysql - boom - page turns white. I did a curl -a www.mywebsite.com and it return nothing. Just to add to the mix. I also setup a drupal behind pfsense and it is rock solid. No glitches after set up (connecting back to the database) Anyone who has experience in fixing this?

Greate!!!!!  It's working perfectly with solution 1 Thank you very much!

Doh, after a bit of googling it appears I've answered my own question. I had to enable the TFTP helper to get it to work. This setting is located at System > Advanced > Firewall/NAT and selected the "TFTP Proxy" for the LAN interface (from the perspective of where my VoIP phones are at my home office).

The CARP configuration is correct and works as designed. The issue is the private WAN link between the internet router and the CARP pair. The secondary needs to source it's address as part of one of the public VLANS which are owned by the Master CARP box. This is causing some kind of forwarding/NAT problem.

@cmb: Nothing in your post to suggest anything. Go through the troubleshooting steps. https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting If your 25444 forward is the same as your 25565 forward with the exception of being a different port, it's most likely #2 or #4 on the common problems list. for some reason accessing CMS through NAT does not work (period)!!!!

What do you mean when you say it's interfering?  Practically everyone in the world is behind a NAT'd connection these days.

I was afraid of that. I highly doubt Charter will even give me a /30, so a preferable /29 is probably out of the question. With the proxy server, wouldn't I still run into the same problem since I only have 1 public IP? Any domain I assign to my public IP would just show up as my IP with no other identifier?

no idea, but some how if i access the same server 1 from the 10.170.2.X's address its green. so i am guessing its filtering my traffic somehow

It's not currently possible. You may only have one enabled at a time.

@perdong: sorry i can't get your picture. what is it that you want to come up with? I guess, technically, I should refer to the many to 1 NATing used in the Outbound NAT feature as what it really is – PAT (Port Address Translation).  Since I've configured several LANs to do PAT to a single address (for the sake of simplifying this discussion) - I'm curious about the possibility of a port number collision on those translations.

try this; System > routing > route. enjoy!

yes possible. main router as your gateway. eth0 - public ip #1 ethx - public ip #2 optx - public ip #n good luck, the fun side is in the route settings ;-)

Thank you, that worked perfectly!