Intra-Zone for Green and Orange

[kostello]

Hello everbody,

Im having the following setup:

green:192.168.5.185
orange:100.100.10.1
red:10.200.1.55

behind the orange interface i have one camera with ip 100.100.10. and gateway the ip of the orange interface (100.100.10.1)
and behind the green interface i have 3 computers with ips:192.168.5. etc...

What im trying to do is to be able to access the camera on port 5000 throught the internet (red interface) via a website which i have succesfully done, but also from my LAN computers via the same website

Its is kind of tricky...so
the camera is on a webpage and any computer outside my lan can see the camera through the website or if you call a <<dyndns-domain:port>>
From my LAN computers when i visit the website or when i call <<dyndns-domain:port>>, i cannot see the camera, because the two networks cannot see each other due to initial installation...

What rule do i have to create for the green and orange interfaces in  to see each other?
I have tried many things but still nothing. i want when i visit the website from my lan pc to be able to see the camera in the website.
i know i have to use intra-zone rules but i get confused...

i ve heard that i have to mess with IP tables at the command line.  and this type of solution is not in the GUI.

is this true?

[globex]

Are you able to browse to the camera directly from the green zone, by typing the http://100.100.10.x:5000 IP address directly into the browser?  If so, you can setup your local DNS server (or update the host files on each PC) to have a static ip address entry specifically for the camera.

kostello wrote:

Hello everbody,

Im having the following setup:

green:192.168.5.185
orange:100.100.10.1
red:10.200.1.55

behind the orange interface i have one camera with ip 100.100.10. and gateway the ip of the orange interface (100.100.10.1)
and behind the green interface i have 3 computers with ips:192.168.5. etc...

What im trying to do is to be able to access the camera on port 5000 throught the internet (red interface) via a website which i have succesfully done, but also from my LAN computers via the same website

Its is kind of tricky...so
the camera is on a webpage and any computer outside my lan can see the camera through the website or if you call a <<dyndns-domain:port>>
From my LAN computers when i visit the website or when i call <<dyndns-domain:port>>, i cannot see the camera, because the two networks cannot see each other due to initial installation...

What rule do i have to create for the green and orange interfaces in  to see each other?
I have tried many things but still nothing. i want when i visit the website from my lan pc to be able to see the camera in the website.
i know i have to use intra-zone rules but i get confused...

i ve heard that i have to mess with IP tables at the command line.  and this type of solution is not in the GUI.

is this true?