Probably an easy questin

ghost32

Hello all, thanks for reading
setting up pfsense for the first time. and having trouble getting traffic to go from LAN to WAN
went through this https://doc.pfsense.org/index.php/Connectivity_Troubleshooting and pretty much all is ok.

from a machine on the LAN port i can
nslookup ok
ping 8.8.8.8
ping WAN ip and WAN Gateway

can't ping any other external Ip other that 8.8.8.8

pinging google.com [216.28.212.110] with 32 bytes of data
reply from (192.168.2.254) TTL expired in transit.

but can ping google dns ( it's my dns server settings dns server for the WAN_DHCP)
and i can tracert that ip too

my lan firewall has two rules antilockout and ipv4* LAN net source and * everything else. (port gateway destination)

i am at a loss..
as learning is the best way forward i want to fix this myself
just i am struggling to this what to look at next?

any ideas?