I would like to have my "dmz"-connected visitors to be able to access services by their global DNS IP (wan) that are redirected to another zone, let's say "lan".
- openwrt wan - 220.127.116.11
- client is sitting in dmz - 192.168.2.101
- httpd is in lan - 192.168.1.2, configured for vhost someservice.net (resolves to 18.104.22.168)
Now dmz guy tries to access someservice.net with his browser and therefore will try to connect to 22.214.171.124:80, which in my imagination should go through wan zone, then get redirected back to lan.
Somewhere along the chains openwrt blocks this, because this connection does not succeed.
My traffic control configuration currently looks like this:
- lan -> wan
- dmz -> wan
- lan -> vpn
- lan -> dmz
Any pointers welcome!