EFW in Bridge mode and problem on publishing internal web servers

[Guest]

[bjb]

Hi,

I just installed EFW in bridge mode with 2 NIC, the scenario is like this:

LAN-->x-Firewall-->EFW-->Modem-->internet

Traffic from inside SNAT by X-Firewall
some IP valid set on Wan interface of X-Firewall and X-Firewall DNAT them to certain internal web-servers.

I defined some rule in "incoming routed traffic" in order to allow traffic from outside on those valid up reach X-Firewall:
source: up-link
destination: those valid IP
allow on port 80-443

this way people from outside could see the websites, but after enabling HTTP proxy, those web site are not available anymore.
I can see in live-log that those traffic treated as this:

HTTP-Proxy=off, "incomingFW"
HTTP-Proxy=on, "HTTP-Proxies"

unfortunately, endian documents have just a paragraph about how it works in bridge mode, so I need your experience to solve this issue.

Thanks indeed,
BJB