24.1.9 Services on two different ISPs without load balancing

[lpiwowarek]

Hi all,

I am trying to replace some old closed-source Firewalls with a pair of OPNsense boxes.

We have two ISPs - Telus and TeraGo

We are running two SFTP sites for reasons beyond my control. On the old firewalls, each one is served via one of the ISPs, so they both can use SSH port

Telus uses DHCP to provide address

TeraGo provides a static /30 with the other IP being their Gateway

I have configured Gateways, with Telus Gateway being the default

I have setup NAT rules on each ISP interface as needed, with the exception that I edited the Firewall rule matching the NAT entry on the TeraGo interface to force it to use the TeraGo gateway to reply

I see traffic coming into the Firewall, and Firewall Liveview shows the packets were accepted and response was allowed, but tcpdump shows no packets actually exit the firewall.

Is this something that simply cannot be done with packet filter?

Thank you,
Lukasz