Basic FW rules for specific setup - OpenWRT router + OPNsense on Proxmox.

Hey,

I've been trying to make this work for the whole day. So I cracked and here I am asking for help :p

I'm seeking help for basic rules (ping, ssh, https access) of servers in my DMZ.

Structure:

My management devices are on vlan10 and is managed by OpenWRT at 10.10.10.0/24.

The management vlan5 is managed by OpenWRT at 10.10.5.0/24. This vlan is used to route vlan10 to vlan40 via vlan5. Opnsense has an interface on vlan5.

The DMZ vlan40 is managed by OPNsense at 10.10.40.0/24.

I have webservers on vlan40.

OPNsense is on a vm in proxmox.

Everything has Internet/dns access. I tried a bunch of rules but to no avail. I get confused because it becomes quite abstract.

A little help would be much appreciated.

Also, why this setup? I don't want my whole network to go down when my proxmox is down. So, for now, OPNsense will only take care of vms and lxcs. Not physical devices.

Thank you :3