Firewall rule for external ip access

RouterOS General
1

Hello.
Here is the scheme:
RB 6.43 FW
WAN-bridge have two addresses: 1.1.1.2/24 и 1.1.1.3/24, with default GW 1.1.1.1
There are two local networks: 192.168.2.0/24 and 192.168.3.0/24
First LAN 192.168.2.0/24 have src-nat rule to 1.1.1.3, the second one 192.168.3.0/24 have src-nat rule to 1.1.1.3 (instead of masquarade i use src-nat rule for internet access)
There is a DSTNAT rule 1.1.1.3:80 → 192.168.3.5:80 (works ok form internet)

Problem:
I can’t access from the first network (192.168.2.0/24) to ext ip 1.1.1.3:80 (which points to second network. as you remember)

Can you give me advice, what firewall rule i have to add ?

2

Make sure you don’t limit the dstnat rule for 1.1.1.3:80 to be valid only from WAN interface. It should be also valid for LAN interface where lives 192.168.2.1/24 subnet.