@dcc@verita84 If you use opnsense, use what's in the gui or plugins. Whatever you install over ssh will get overwritten during updates and not saved in configs. https://www.routerperformance.net/opnsense-repo/ Repo for Adguard plugin or opnsense.
@dcc@verita84 Click the box on the left of rule and to the right there's arrow that says move below or something. Let me get screenshot. NAT was not something I had to change it just works. If you are port forwarding it only applies to one IP, otherwise use reverse proxy.