Dual wan with CP problem

[josey]

Hi guys, i have one problem with captive portal…

i have
2 x wan
3x LAN interfaces, one of them used for CP

1x WAN with squidguard enabled, since squidguard and load balancer cant work together
1x OPT1 (as WAN 2) that should take traffic from clients connected to CP interface

And here is the thing, i have set rules on lan interface (OPT4) that uses CP, that instead default gateway interface use OPT1 as gateway.

and now there is no CP page, instead, clients can go to internet directly without authentication.

How can i fix this?
please dont gave me advice to use 2 pfs machines, i know to solve problem with 2 machines :)

thanks guys