Messages

in my setting
"destination" is "This firewall"

to my understanding it mean

interface "WAN" is wait connection in this interface
destination is the "firewall" or self, or machine with the WAN interface

redirect target, because the target is an internal PC/machine
so IP of your target machine or CA machine
redirect port, if not the same port as external...

in my case I access, my CCTV server, with external port 888 redirected to the proper http port internally

you may want to
check if the rules have been applied (no "apply" button in upper right)
check the "automatically generated rules, you have 9, maybe 1 is in conflict
is it safe to assume you have set IP as source 172.16.16.23/32 and destination 172.16.16.122/32

screen shot of the actual rule setting would be nice.

@proxykid
are you using 19.7.3?

mine is alittle different but having issue also with 19.7.3
my setup
2 wan (W1 and W2)
2 lan (LAN1 and Lan2/vlan15)

both can access the internet if using gateway
"default" , multiwan, or wan1
forcing wan2 as gateway will result to no Internet.

using tracroute diagnostic in "interfaces", opnsense, basically routes all trafic to wan1
even if I use wan2 as port to test the trace.
(I can see because all connect in traceroute uses the router ip of my wan1)

A little different but something is wrong with how it is routing and "choosing" the gateway.
(wan2 is functional if I directly access the modem)

FIXED:
I fixed my issue with WAN2 by removing wan2 interface (gateway groups and the WAN2 interfece itself etc..), then setting it up again...
now in tracerout the correct router(modem2) is being used. maybe a bad setting somewhere on upgrade that cause it to incorrect route wan2 to wan1

typical issue is that the DB is corrupt

in that case, you need to press the [Reset] button

just saw your diagram and you have dmz already..

The rules where there before, but not visible for the end-user.
You can also use the inspect button (top right corner) now to see which rules actually are triggered.

Is this a multiwan setup by the way? and when did the issue start (which version)?

mine is dev build 75, was ok on build 44
mine is on a multiwan, but forcing the default or specific wan does not help either
almost same, outgoing seems ok but internal transfer/access seems to be blocked

it didnt help, confirmed issue is replicable.
from production (working) to delopment (no internet).

opnsense, has internet access, I can use diagnostic to ping and trace route outside/public IPs.
and I can easily switch from development to production.
but the internal LAN has no internet, from the looks of it is as if the gateway is not returnning data to LAN (not sure). I can see in the live view that the machine im using is making dns request (and it is green).
it is as if the gateway is not responding the the reuest or ignoring...

the captive portal shows up, but does not connect to the internet..

if you need me to do something, just instruct me and let me know

it may be a DNS issue or a firewall rule issue
it would be clear if more info such as settings and screen shoots of rules

just post here when available, have a nice vacation

oh right... now I remember...

maybe the button should be rename Reset DB, Reset config so it will be much more clear

setup detailes and config?
one lan? ips etc.

without captive evrything is ok?

i think i found it before but cant seem to remember were?

where is it located?

agree, help said by checking the box opnsense will use the routing table not the asisgned gateway.

would that mean any rule assigned to wan2 will be diverted to system "default"
and
would multiwan(load ballance) used system default?

or is this just a temporary solution for the issue?

had issues also but not same setup...
mine is load balance mode. cant figured out to reroute so I just went back to "production"

everything was working on .44 dev version but after upgrading to .72... routing got messed up for some reason...

going to production without any changes or re config fixed the routing issue.

direct domain to a specific WAN interface
is it possible, without using an IP as basis?
since most servers nowadays uses either load balancers or cloud.

ex.
www.domain1.com
will only go out of wan2

www.domain2.com
will only go out of wan1