# in /etc/config/firewall
config rule
option dest_port '443'
list src 'dmz'
option name 'https_dmz_to_lan'
option target 'ACCEPT'
list dest_remote 'lan'
option proto 'tcp'
config rule
option dest_port '443'
list src 'lan'
option name 'https_lan_to_dmz'
option target 'ACCEPT'
list dest_remote 'dmz'
option proto 'tcp'