Help: Firewall WAN rules "doesn't" work

[mhaluska]

Hey guys,
I found strange issue when configuring new OPNsense VM. No idea why, but WAN rules (allow) doesn't work, but floating rules assigned to WAN works.
For WAN rules with "log" enabled I see it's allowed in log = matched, but doesn't work (tested ICMP & Web management to WAN).

HW: KVM on Proxmox proxmox-ve: 6.0-2 (running kernel: 5.0.21-5-pve)
OPNsense: 19.7.7-amd64 OpenSSL
WAN: private IP with private networks allowed in interface configuration, Proxmox linux bridge with bond0 4-ports LACP
LAN: private IP, Proxmox linux bridge without interface
All HW offloading is disabled.

There is no plugin installed, it's totally clean installation with minimal required setup.
Some idea where to have a look?
Thanks

P.S.: I tried pfSense with same setup, it's working without problem. I'm also running long time 2 different KVM OPNsense on another machines without this issue.