Hi again,
First of all, thanks for the answer. I already had an "all traffic" rule, so unfortunately that didn't work for me.
I did, however, find the problem. I'd used the standard 3-leg perimeter template to configure my networks, but apparently that's broken.
It uses the NAT relation for...