What I would like to achieve is to have my "dmz"-connected visitors to be able to access services by their global DNS IP (wan) that are redirected to another zone, let's say "lan".
- openwrt wan - 126.96.36.199
- client is sitting in dmz - 192.168.2.101
- httpd is in lan - 192.168.1.2, configured for vhost someservice.net (resolves to 188.8.131.52)
Now dmz guy tries to access someservice.net with his browser and therefore will try to connect to 184.108.40.206:80, which in my imagination should go through wan zone, then get redirected back to lan.
Somewhere along the chains openwrt blocks this, because this connection does not succeed.
My traffic control configuration currently looks like this:
- lan -> wan
- dmz -> wan
- lan -> vpn
- lan -> dmz
Any pointers welcome!