Port redirection not working

[jon]

@mc5686

Here I see the first strange thing: ORANGE → GREEN is “blocked”, but I’m unsure about real significance.

This one may help:
https://wiki.ipfire.org/configuration/firewall/default-policy#default-firewall-behaviour

@mc5686

but ACK gets a DROP_CTINVALID for some reason so connection never succeeds.

This one may help:
https://wiki.ipfire.org/configuration/firewall/options#log-dropped-packets-classified-as-invalid-by-connection-tracking

And this one will help:

DROP_CT_INVALID message since upgrading

Hi, these are nothing to worry about, and IPFire has always dropped these packets - they just were never logged, which is a considerable disadvantage when it comes to troubleshooting and debugging. DROP_CTINVALID was introduced in Core Update 164 to overcome this, but it did not change anything on the firewall engines’ behaviour. No, that switch is the correct one. Because reloading the firewall engine - which is what happens if firewall rules in the GUI are modified, and the “apply” butto…

---

EDIT:
and this one for RED to DMZ (orange):

Setting up a DMZ - The IPFire Wiki