macvlan docker connection - Indirect

Having some trouble with this one… I’m no Linux newbie, but kinda new to Docker.
I’ve spun up my docker container, Plex official. I set it up with macvlan networking, and assigned it a unique IP.
My server VLAN is VLAN4 (10.10.104.0/24) and my clients are all on VLAN3 (10.10.103.0/24).
My docker host is 10.10.104.25 and my Plex docker container is located at 10.10.104.26. I have many other docker containers on this macvlan setup (10.10.104.26-37). They all seem to function normally.
I use pfSense for my firewall, and while granted, it’s a little more restrictive than most, I have enabled uPnP and I see the port mapping for my Plex container. This seems to be working fine.
On VLAN3, I have a Roku 3, which always complains about an indirect connection, while the Android TV box does not. Both are running the most recent Plex client available. What’s the most frustrating though, is how no matter what I do, I can’t get remote connections to run direct at all. I can’t seem to find any problems with my port forwarding (uPnP).
Any thoughts? I know I’m running a little more complex setup than most, but I kinda need to, as my home lab and home office need to be segregated from my other clients, for security reasons.

I will add at this time…
I got a friend to test https://WANIP:PlexPort and it’s working fine.