NAT not working

[larsp]

I ran the wizard again and that seemed to have fixed it all...

I am about to completely reconfigure my setup and consolidate a lot of servers on proxmox.
1. OpnSense is running on proxmox. It has two virtual IPs, wan 192.168.1.121 and lan 192.168.1.130
2. Portainer is running on proxmox serving containers, but lets focus on running a website on 192.168.1.107:6500
3. I have set up a NAT to forward 6500 on lan and wan to 192.168.1.107 on port 6500

I can do a telnet from opnsense to 192.168.1.107:6500 without issues
When I do a telnet or browse to 192.168.1.121:6500 or 192.168.1.130:6500 it is allowed in the firewall log ("let out anything from firewall host itself"), but it never returns anything.

Secondary. I tried setting 192.168.1.130 as my default gateway. opnsense now blocks EVERYthing
   lan      192.168.1.127:58343   xx.xx.xx.xx:443   tcp   Default deny / state violation rule
Why? lan has the default everything is open rule

What am I missing? The only other thing I have changed is to enable "Reflection for port forwards"