Problem with VIP / Port Forwarding

I actually created two rules, one for source specific IP to the VIP object, and then a secondary rule from Any to Any over interfaces WAN1 to LAN.  By messing about with things, I'm gradually getting hits.

This example if for a specific destination.  What about when a specific port is required ?  Suppose I want to route all traffic for HTTPS connections

As I see it, there are two options

Option 1 - Tick the Optional Filters and add HTTPS to Services, and in Port Forwarding, add 443

OR

Option 2 - Leave Optional Unticked, tick Port Forwarding, and add 443 as both External Service Port and the Map to Port 

Or is there another way that I have missed ?

Also, regarding filtering for a specific source, is there any way to filter for a specific source DynDNS name FQDN rather than an IP ?  If I wanted to allow a specific source only to reach a specific server internally, but if the source IP could change periodically ???

Why are you saying Internal to Internal ?  Even the Diag Sniffer shows it arrives from a public IP on the WAN1 interface.  Or am I missing something ?

Hi again,

While I have got VIP from any IP working OK, I just cannot get VIP with a specific SOURCE working.  The source connects to a Public ISP IP which port forwards All Ports to the WAN1 Ip address of 192.168.1.17.  The VIP Points this IP at 10.10.5.111.  I am trying to connect on Port 9000

Here is the config

[code]
config firewall vip
edit "Spirit-Portainer"
set uuid 75bbf530-8fc8-51ef-df2a-8a35661cf4f2
set src-filter "193.147.205.221"
set service "TCP-9000"
set extip 192.168.1.17
set extintf "wan1"
set portforward enable
set mappedip "10.10.5.111"
set mappedport 9000
next
end
[/code]

and then

[code]
config firewall policy
edit 17
set name "Spirit-Portainer"
set uuid 73b5e1e0-8fca-51ef-d361-71437267bdf5
set srcintf "wan1"
set dstintf "Mgmt"
set srcaddr "championc"
set dstaddr "Spirit-Portainer"
set action accept
set schedule "always"
set service "TCP-9000"
set logtraffic all
set fsso disable
set comments "Specific Source to port 9000"
next
end
[/code]

and

[code]

config firewall address

edit "championc"
set uuid c3dad6c2-8fd3-51ef-7151-8db0818b9447
set associated-interface "wan1"
set subnet 193.147.205.221 255.255.255.255
next

end

[/code]