DMZ host-host connection via RED dropped by firewall

[luani (Leo Hofmann)]

Hi Tulpenknicker, thanks

@anon33261557

You only want access to server 1 from the outside, so why not communicate with IP to reach each other (internal). Looks ok for me.

That would also be my preffered solution. Unfortunately there is the following problem: I can only specifiy a single URL which then gets passed to the Javascript/HTML user interface and the Document server.
Therefore specifying a private IP instead of the URL breaks the user interface for all my remote users. Not good at all.

@anon33261557

To say it this time more clearly I think this have nothing to do with IPF. No rule missing.

Well, I’m stubborn
So I took some inspiration from the Wiki and tried it anyway with the following rule:

Source: IP 10.0.0.2 (the client)
Destination: IP 10.0.0.1 (the webserver)
NAT: Source NAT, new Source ORANGE
Protocol: HTTPS

Of course IPFire complained:

The last generated rule may never match, because source and destination subnets may overlap.
Please double-check if this rule makes sense: Source: 10.0.0.2/32 Target: 10.0.0.1/32

But it works fine now!

Obviously I don’t know how exactly this works. So I would appreciate it if someone could explain this to me (or at least confirm that it is safe).