Secondary WAN routes out through the primary

[dkmcgowan]

I have a multi WAN setup, WAN and WAN2. I'm working on auto failure and have things mostly working except for DDNS. The issue is routing and I'm not able to figure it out.

Basic question, with both of those interfaces up and with public IP's and working, if I go to Diagnostics and enter a command prompt:

curl -s --interface igb0 https://api.cloudflare.com

That is through WAN and works great

if I do

curl -s --interface igb1 https://api.cloudflare.com

That should be through WAN2 but it gets blocked by the default ipv4 firewall rule on interface WAN.

I have NAT set to auto.

WAN and WAN2 just have simple rules for an inbound port I use. LAN routes through a Gateway group with WAN as the primary and WAN2 as the fall back. When I issue:

curl -s --interface igb1 https://api.cloudflare.com

From the router, is that running on LAN, through WAN2, back through WAN?

thanks for any help!