No Outbound NAT from LAN

[rhubarb]

I have a pretty simple floating rule to pass all ICMP traffic with no gateway selection.

I can see in the log when the traffic arrives and it gets passed.

I can see a ping from a host to 1.1.1.1 on the LAN interface.  I see nothing on the WAN interface.

Unbound traffic is flowing and DNS is resolving from the LAN net.

Outbound NAT rules are automatic.

Private/BOGONs are not blocked on the WAN. 

Any ideas?