Intra-Zone for Green and Orange

[Guest]

[kostello]

Hello everbody,

Im having the following setup:

green:192.168.5.185
orange:100.100.10.1
red:10.200.1.55

behind the orange interface i have one camera with ip 100.100.10. and gateway the ip of the orange interface (100.100.10.1)
and behind the green interface i have 3 computers with ips:192.168.5. etc...

What im trying to do is to be able to access the camera on port 5000 throught the internet (red interface) via a website which i have succesfully done, but also from my LAN computers via the same website

Its is kind of tricky...so
the camera is on a webpage and any computer outside my lan can see the camera through the website or if you call a <<dyndns-domain:port>>
From my LAN computers when i visit the website or when i call <<dyndns-domain:port>>, i cannot see the camera, because the two networks cannot see each other due to initial installation...

What rule do i have to create for the green and orange interfaces in order to see each other?
I have tried many things but still nothing. i want when i visit the website from my lan pc to be able to see the camera in the website.
i know i have to use intra-zone rules but i get confused...

[kostello]

i ve heard that i have to mess with IP tables at the command line.  and this type of solution is not in the GUI.

is this true?