Dual WAN routing issues

assaf

Hey guys,
weird issue here and i would be grateful for some assistance.

i have two ADSL Routers
192.168.1.1 with dmz configured to 192.168.1.3
192.168.2.1 with dmz configured to 192.168.2.3

they both have internet and each of them has a LAN port connected to pfsense machine.
pfsense machine has 3 eth :
1. WAN - 192.168.1.3
2. WAN - 192.168.2.3
3. LAN - 10.0.0.1 ( pfsense managment ip )

i have internet in both routers and for all machines using pfsense as gateway - so far so good.

Problem start here:
1. i created NAT rule for port 80 from WAN1 addresses to 10.0.0.10 at port 80 - WORKS
2. i created NAT rule for port 80 from WAN2 addresses to 10.0.0.10 at port 80 - DOSNT WORK !
so i thought ok, might be dmz issues or firewall rules, but i cant find anything wrong.

so i thought ok, lets make sure i can use this gateway so i set WAN2 as default gateway and yes when i go to whatismyip.com i see the correct ip
but , i changed default gateway to WAN1 and when i set a LAN rule with:
Source : 10.0.0.20 ( my pc )
Port: ANY
Destination: ANY
Port: ANY
Gateway: WAN2

and then go to whatismyip - i still see WAN1 external ip.

any ideas ?

heper

you'd have to kill states to get 'whatsmyip.com' to show the correct state.

can you post a packet capture when the port-forward works & one where the port-forward fails ?
are you using automatic nat or hybrid or manual ?
are you running the webgui on port 80? Does it help to change the webgui to a different port ?

assaf

Thanks heper for your quick response.
the NAT issue was actually me being too tired to do installations.
i only reseted the first router after configuring the NAT so NAT works great ( tested with different ports ).

the second issue is even more obvious.
as i have the default rule ( LAN net to get out ) it was higher then the rule of the change WAN for my ip.

this why you shouldnt deal with networking installation after 3:00AM