Network Issue - 2 Firewall Config

[Srixun]

Hey guys!

Basically, I need to get my primary network rebuilt. I know this much

But, my issue right now...

So I've got a pretty ridiculous network setup, and up until about 20 minutes ago I believed it was the issue of the UDM PRO-SE. However it looks to be a routing issue from my OPNSense. Most likely user error. 😉
OPNsense handles DHCP to the DMZ
OPNsense static IP of 10.10.5.1 to the UDM
UDM Then NAT to 10.15.5.1
problem is, Nothing outside of the UDM Pro is getting via to the Wazuh Manager via port 514,1514.

My assumption is to create a Virtual IP to let the OPNSense route to that network, but I have tried that (albeit not super familiar with VIPs) and no dice.

I've tried forcing all packets on said ports to the ip of 10.15.5.227, no dice.
forcing all packets to the UDM, UDM having a rule to forward all packets to the .227, no dice.
Event he Wazuh Agent on the OPNSense box (baremetal) isnt getting there, which makes sense.  but logs show it pushing everything out to the internet and a traceroute shows the same.

how can I get these to forward over?


(Eventually the goal is to give DHCP back to the opnsense but not lose function of the UDM, reason why the OPNsense is in front is because the Unifi series isn't the most secure, especially with them firing most of their US based dev team to go offshore) which I think would fix this whole thing, but I'm just looking for a quick patch for this atm.