What I understand, the problem is probably my firewall since the public vlan is using external DNS servers which then point back to my external ISP interface for the website. Most firewalls don't like to allow traffic from inside to go out then back in.
I think this is the problem...
When I use the iptables --dport option as you recommended.
it works if I enter the ip address, but it does not work when I enter the domain name of my web server, unfortunately :)
Thanks for your answer.
The whole point is to separate the LAN network in to subnets. I noticed the alternatives you mentioned on the forum. But, If I do what you say I will expose my server to all subnet clients.
WAN to LAN IP on 2 specific port open (80/443) is OK
Subnet to LAN IP on all...
I am running a web server and have set up port forwardings (WAN...Virtual Server / Port Forwarding) for 80 and 443. I have the registered DNS name resolves to my ISP-assigned IP address. I am able to reach the web server from outside internet and also from the LAN, in both cases by using its DNS...