It looks like it thinks they are coming from different address scopes. Can you confirm by checking the address scope on both sides of the router via the API (ipv4_address_scope on the external network matches the ipv4_address_scope on the internal network)?
It looks like it thinks they are coming from different address scopes. Can you confirm by checking the address scope on both sides of the router via the API (ipv4_address_scope on the external network matches the ipv4_address_scope on the internal network)?