how to log client public IP when connected to LAN server

[qoodrink]

newbie here, current mikrotik / RouterOS user and recently been testing out Opnsense.  I couldn't get this simple scenario to work on Opnsense.  I'm on the internal server and all i see is request coming from OPN WAN IP. 

Client IP (WAN)  1.1.1.1  ------>   2.2.2.2:443 OPN(WAN) --->10.1.1.1 OPN(LAN) -----> 10.1.1.2:3000 SERVER (LAN)

Application works great. Except in my server(LAN) web access log and tcpdump see only the IP of the OPN WAN Interface which is 2.2.2.2. I've been fiddling with different options in NAT settings  (manual/auto DNAT/SNAT/firewall)  for couple days but no joy, i could either get OPN WAN or OPN LAN IP to log. I thought typical hairpin/nat reflection would work.


 

EDIT: I got this to work now! i have multiple WAN virtual IPs, configure typical DNAT and SNAT with specific WAN IP solves it.  left every unchecked in advanced settings.