Here is an image representation and explanation:
INBOUND TRAFFIC
-Comcast modem is set to forward all traffic to DMZ and it specifies to forward all traffic to the IP 10.10.10.10 (WAN CARP IP)
OUTBOUND TRAFFIC
-End user has DNS, DHCP configured to LAN CARP IP 192.168.100.1
-Outbound NAT in both pfSense are configured to use WAN CARP IP
I’m not sure how accurate this information is but in one of netgate youtube videos, they mention to delete outbound NAT if DMZ is enabled. [Minute 39:30]. He does not expand more on why, but this is the only information I’ve been able to gathered that is similar to my setup.
