Port Forwarding

[furfix]

I have faced an issue today and I fixed, but not sure if this is OK or there is a security concern about it.

I have a Plex Server on a isolated VLAN. I have forwarded the port to the server using WAN interface (Firewall > Nat > Port Forward), and I've enabled NAT Reflection in order to be able to get access to PUBLIC-IP:PORT from the network.

The problem I faced is that PUBLIC-IP:PORT was only accesible from the VLAN server, meaning that the TV (in a diff VLAN) had no access.

The way I could solve it was, adding the Interface on the Port Forwarding rule. Now it's WAN + TV VLAN.

Is this OK? It's working. TV VLAN now has access to PUBLIC-IP:PORT, but not sure if it's the correct way to do what I need to do.