If you didn't just make a typo in the transcription of this, you may want to check your LAN side address. Your LAN_NET in this is not the subnet that your LAN_IP is on.. I wonder if this is confusing your rules?
Keen eye, but it was indeed a typo. Sorry.
-- Andrew E. Mileski
