Not all subnets in OpenWRT can access inteal device via WAN

On my OpenWRT router I have such interfaces:

• Lan1, physical interface eth0, IP address 10.10.0.0/16
• Lan2, physical interface eth1, IP address 10.11.0.0/16.
• Wan, physical interface eth2, IP address is provided by ISP and bound to my domain for example www.my-host.com.

My zone and forwarding configuration is:

Zone => Forwarding      Input      Output    Forward
----------------------------------------------------
lan1 =>  wan  lan2      ACCEPT     ACCEPT    ACCEPT
lan2 =>  wan  lan1      ACCEPT     ACCEPT    ACCEPT
wan  =>  lan1 lan2      REJECT     ACCEPT    REJECT

Now I have a HTTP server in the Lan1, say 10.10.0.10:80, and I have added a port forward rule on the Wan so I could access it via http://www.my-host.com:80.

And now I get results:

Location        Remote                  Result
----------------------------------------------
Exteal        www.my-host.com:80      OK
Lan1            10.10.0.10:80           OK
Lan1            www.my-host.com:80      OK
Lan2            10.10.0.10:80           OK
Lan2            www.my-host.com:80      Error, connection refused

In other words I could access this site from both inside and outside my router but only except when I was going to access it from Lan2 via Wan.

Keywords:

• The HTTP server is located in Lan1.
• The HTTP server could be accessed via inteal IP or Wan port NAT from Lan1
• The HTTP server could be accessed via Wan port NAT from exteal
• The HTTP server could be accessed via inteal IP from Lan2
• The HTTP server could NOT be accessed via Wan port NAT from Lan2

And my question is: How can I make this server could be accessed via Wan port NAT from Lan2?

Recent Questions...