Multi WAN dropping packets - SOLVED

[DCorvid]

I feel like this is a stupid problem, but I'm pulling my hair out and just can't see it.

I'm trying to set up Multi WAN failover. The WAN2 device is a cellular hotspot device (Alcatel Linkzone 2), connection is USB-over-ethernet. Hooked up to other computers with same cable this connection works fine. I've followed the Multi WAN howto for a failover configuration, setting up gateway groups, the policy-based routing rules, etc. DHCP on the hotspot issued a 10.30.30.0/24 address to WAN2. (Double-NAT). I have unchecked the "block private networks" and "block bogon networks" checkboxes in the WAN2 configuration.

The problem is that incoming packets don't seem to make their way through the WAN2 device. When I run tcpdump on the ue0 interface (WAN2) I see the ICMP packets go out and return! But ping shows 100% packet loss. I toggled the "Disable Firewall" switch, and indeed the pings start working.

The thing is, I only have the default WAN2 firewall rules defined- Looks like they should be passing all traffic. What am I missing?

[DCorvid]

SOLUTION: I'm not sure what got misconfigured, but I decided to remove the interface assignment, remove the GW associated with it, and recreate it with "block private networks" unchecked. Maybe there was a bug with the auto-generated firewall rules not getting updated if you change the state of that checkbox after creating the interface/gateway? Not sure.

Once I did that everything worked perfectly with exactly the same settings as before, except I didn't bother to uncheck "block bogon networks" this time. Just sharing the remedy for anyone who runs across something similar in the future.