-Ok so I need to add appropriate firewall as well as D-NAT rules for my port forwarding and get away from the GUI forwarding. I kind of assumed tha twas the case since it only allows for forwarding based on one ethIN. And it makes sense that in firewall I can define what I want to allow and D-NAT will push it to the appropriate destination.
I do not want eth2 in the LB group. So can I use your "something like this" and paste it into my config as a correction and then upload the corrected config to the router? I'm not too keen on the CLI lines. I will read up for the commands as well.
So, Firewall and D-NAT rules. Modify LB rule. and PBR rules to force it out of that connection.