Ok - I'm stumpped. I have a camera inside my network that is using dynamic dns (no-ip) so it can be accessed from the internet - specifically on port 2263 (TCP/UDP).
My network looks like this: Internet router --> MX64 -->core Switch -->Access switch-->Camera.
The camera is accessible from inside the LAN by IP:2263, so I know the LAN is not an issue. Forwarding rules look like this (the other forwarding rules work just fine):
When I try to ping the camera from external of the network via DNS, the packets stop after the internet router (I see the attempt to connect to the LAN). so the firewall has to be the issue. I only have one IP at this location (DSL), so 1:1 NAT is not an option.
Any help would be greatly appreciated.