I would be grateful if someone could provide clarification on the rule I have created.. I have a local mail server on my green network 10.10.1.50. Reference, this is running Stalwart A new Rust based email server.
IP fire is behind my local router.Therefore the red address of IP fire is 192.168.1.2 And the router address 192.168.1.1.
In order to validate the SSL certificates, A Thunderbird client is pointing to mail.xxx.com Which resolves to the external IP address of the router 193.xxx.xxx.xx.
I’m trying to restrict traffic to my email server to clients within my green network. Therefore, looking at the logs, I was expecting to see traffic to port 993 with the source being 193.xxx
Instead, the traffic to port 993 is showing the source as 192.168.1.1. This is what has me confused. Other types of traffic In the log show the random internet address of the incoming.
So I have created a rule to forward 192.168.1.1. to 10.10.1.50 allowed.

However that does not work I get
Would appreciate if someone has this setup working.