I got /28 public IP from my ISP (lets say it's x.x.x.[0-15]), but it's routed through a private net address (lets say it's 10.10.10.0/30; 10.10.10.1 is the ISP's gateway, and 10.10.10.2 for my IP).

Here's my linux box's setup:

                     ISP
                 (10.10.10.1) 
                      |
                      |
                 (10.10.10.2)
                     eth2
      ------ eth1 - Linux Box - eth0 -------
      |   (x.x.x.14)       (192.168.0.254) |
      |                                    |
     DMZ                                  LAN
    (x.x.x.0/28)                        (192.168.0.0/24)  

The LAN section was NATed to x.x.x.1 (in linux it's an IP alias in eth1 ).
(Actually the LAN section is more complicated with several networks, but I figure if I can make this work, it will be easy ).

My goal is to replace the linux box with pfsense.
I tried pfsense (Advanced NAT, VIP, set ISP gateway as default gateway, allow all rulez) but somehow I can't even ping host that was in other networks or even any other server in internet. I can ping any IP that are located in the pfsense box.

Now, since I have no idea where to start, can anbody give me a clue?

(BTW, I did try a configuration using monowall, same network as above but without the LAN part (only WAN and DMZ (as LAN in monowall)), and it worked)