[SOLVED] dnat not registering firewall rule

[ybc]

hi,
i just spun up vm of opensense on proxmox
Versions
OPNsense 26.1.2_5-amd64
FreeBSD 14.3-RELEASE-p8

But when I try to create a port forward with the register rule selected, it doesn't create any entries in the firewall rules table.
I have the reflection for the destination NAT setting checked. I reset opnsense to the default settings with the same result.
WAN is disconnected for now, and i'm only connecting to opn via LAN ip to configure everything from my pfsense config. Any pointers?
Interfaces are assigned (WAN/LAN), but WAN interface on proxmox is disconnected for now before going live.

I'm not sure if I'm doing something wrong, but on my pfsense the same steps create an associated rule.

SOLUTION
NVM, I had to expand the list to see it, since it doesn't expand by default?

[CautionaryCushion]

could you please explain what you meant by "had to expand the list to see it"? what list do you mean?

i just created a destination NAT rule on my OPNsense installation (26.1.5), selecting "Register rule", hitting the "Apply" button -- and then when i go look in the "Rules [new]" page, there is still no associated firewall rule there. the number of rules (in my case, 19) does not increase by one when i repeat this process again.

[nero355]

SOLUTION
NVM, I had to expand the list to see it, since it doesn't expand by default?

could you please explain what you meant by "had to expand the list to see it"? what list do you mean?

IIRC the New Firewall Rule associated with the Destination NAT Rule is placed between the Pre-defined Rules that are not shown by default and need to be expanded by the user in the "New Firewall Rules webGUI" :)

/EDIT :
See below for a better explanation by @OPNenthu !!

[OPNenthu]

If you used the "Register rule" option then it creates an associated system-generated F/W rule.  There's a separate category for those that you can only see if you enable the "Inspect" mode in Firewall->Rules [new].  The category is labeled as "Automatically generated rules."

There are actually two such buckets, one at the start of the ruleset and one at the end: https://docs.opnsense.org/manual/firewall.html#processing-order

The DNAT F/W rule goes in the second one (at the end of ruleset).

Example screenshot from a test VM attached.