Port Forwarding and Plex/VPN

I cannot for the life of me get port forwarding to work and so cannot get Plex to work nor VPN. Can anyone help

show interfaces
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface    IP Address                        S/L  Description                 
---------    ----------                        ---  -----------                 
eth0         -                                 u/u  Internet (PPPoE)            
eth1         10.0.0.1/24                       u/u  Local                       
eth2         192.168.2.1/24                    A/D  Local 2                     
lo           127.0.0.1/8                       u/u                              
             ::1/128                          
pppoe0       x.xx.xx.xxx                       u/u   

show firewall
 all-ping enable
 broadcast-ping disable
 group {
     port-group Plex {
         description Plex
         port 32400
     }
 }
 ipv6-receive-redirects disable
 ipv6-src-route disable
 ip-src-route disable
 log-martians enable
 name WAN_IN {
     default-action drop
     description "WAN to internal"
     rule 10 {
         action accept
         description "Allow established/related"
         state {
             established enable
             related enable
         }
     }
     rule 20 {
         action accept
         description Plex
         destination {
             address 10.0.0.81
             port 32400
         }
         log disable
         protocol tcp
     }
     rule 21 {
         action accept
         description Misc
         destination {
             address 10.0.0.81
             port 82
         }
         log disable
         protocol tcp
     }
     rule 40 {
         action drop
         description "Drop P2P"
         log disable
         p2p {
             all
         }
         protocol all
     }
     rule 51 {
         action drop
         description "Drop invalid state"
         state {
             invalid enable
         }
     }
 }
 name WAN_LOCAL {
     default-action drop
     description "WAN to router"
     rule 10 {
         action accept
         description "Allow established/related"
         state {
             established enable
             related enable
         }
     }
     rule 20 {
         action drop
         description "Drop P2P"
         log disable
         p2p {
             all
         }
         protocol all
     }
     rule 30 {
         action drop
         description "Drop invalid state"
         state {
             invalid enable
         }
     }
 }
 options {
     mss-clamp {
         mss 1412
     }
 }
 receive-redirects disable
 send-redirects enable
 source-validation disable
 syn-cookies enable

show port-forward
 auto-firewall enable
 hairpin-nat disable
 lan-interface eth0
 lan-interface eth1
 rule 1 {
     description Misc
     forward-to {
         address 10.0.0.81
         port 82
     }
     original-port 82
     protocol tcp
 }
 rule 2 {
     description "Plex Server"
     forward-to {
         address 10.0.0.81
         port 32400
     }
     original-port 32400
     protocol tcp
 }
 wan-interface pppoe0

what am I missing?