Connection from DMZ to LAN Role

Hi, i’m new using MikroTik router . And i have some problem to configure nat and Firewall Role to permit to make connect a DMZ smtp mail server to my Exchange Server.
I have a router RB750GL (OS 5.25)
I have configured :
Port1 With a PPPOE connection,
Port 2 and 3 as LAN
Port 4 and 5 as DMZ

In the DMZ I have a server that recive malis from Internet and forward them to Our Exchange server that’s present in our LAN.
I try to do it adding a NAT Role to permit send data from DMZ to LAN server, like follow:
Chain: dstnat
Src address: 192.168.20.2 (DMZ server IP)
Incoming Interface : my DMZ interface
Action: dst-nat
To address: 192.168.120.30 (LAN exchange IP)

In the firewall section i add the following role.
Chain forward
Src address: 192.168.20.2 My DMZ Server address
Dst address: 192.168.120.30 My LAN Server address
Incoming interface DMZ
Outcoming Interface LAN
Action: Accept.
For now i do not filter for protocol and port (i’ll do that after).

But it doesn’t work.
Any suggestion?