Firewall/NAT

Hi there

I am trying to use monowall within a virtual Environment (vSphere 4) to give several VMs, which are grouped in different VLANs, access to one PC going to be FTP in furture.

On monowall VM I got three interfaces, all nics are configuered as E1000
LAN - em0 - just for configuration
WAN - em1 - IF where FTP is connected to
OPT1 - em2 - IF where all VMs will be connected via Trunk Port (4095) from vSwitch

On WAN I set up "STATIC" with (172.6.99.235)  and FTP behind it got (172.6.99.232)

On OPT1(Trunk) assiged neu VLAN (1000 for testing) and activated DHCP on new V1000 interface.
A TestVM (192.168.10.200) in VLAN 1000 was already given a IP from this DHCP.

On interface V1000 and WAN I created "ALL OPEN", to block nothing.


I can ping from TestVM (192.168.10.200) to WAN (172.6.99.235)
But not to FTP (172.6.99.235) although the Logs say ICMP was working

I can also not ping from FTP (172.6.99.232) to WAN (172.6.99.235)


What may i have done wrong?
See also pics

Thank you