VM network problem after macvlan (Truenas Jail not reachable)

[blacklight]

So I am tinkering around with VMs on Unraid for quite a while now, but I still can't figure out a simple way how to work with the change to macvlan (instead of ipvlan). I changed th macvlan because I am actually using a fritzbox router and I wanted to avoid problems with the network and the system stability (as descibed here: Unraid Doc MACVLAN

It took me quite a while to get everything back online as I wanted it to be, but there is one thing I can't fix: Truenas Jails.
So my main storage is Truenas inside a Unraid VM and that works pretty well for me. To access this storage I use mutiple ways like smb, nfs and also sftp. Sftp is a little special in this case because the mainstream way to access part of the storage is to create a jail with the sftp user as a root user (group wheel). That makes accessing via sftp/ssh easier than managing the access inside Truenas itself. With that solution a part or a whole pool can be mounted into the jail, to restrict access to certain shares.

After changing from ipvlan to macvlan I can not reach the jails anymore from outside the VM despite the fact that I can still reach Truenas.
The jails obtain IPs by my mikrotik switch's dhcp (of the local subnet) but can not be pinged from there ...
I even added a separate virtual network adapter inside the VM xml in Unraid:
 

<interface type='direct' trustGuestRxFilters='yes'>
   <mac address='52:54:00:a4:70:55'/> 
   <source dev='vhost1' mode='bridge'/> 
   <model type='virtio'/>
   <address type='pci' domain='0x0000' bus='0x00' slot='0x09' function='0x0'/>
</interface>

 

Selecting the second adapter doesn't change the behavior and from my understanding it also shouldn't because both virtual adapters are bridged together with the host.

 

I understand that the virtual bridge of Unraid is closed from the outside but I never had problems reaching the Truenas UI.

During research I found plenty of tutorials for docker networks but for VMs in unraid it feels like a forest the 'usual' Unraid expert just knows how to navigate.

My guess is, that the problem relies on the Unraid side, because I noticed it after changing to macvlan. Next to this I can ping the jail from truenas and vice versa with success.

 

I would be glad about any explenation because I am trying for several days now without really understanding what the problem is.

I have to rely on these sftp access jails fo photo backups of mobile device (and no unfortunately SMB/NFS is not an option, because it is just not as versatile).

 

Thanks