Check whether you have a firewall policy to forward traffic from the internal zone to the external zone. From the command line (e.g., in a Cockpit Terminal window), enter “firewall-cmd --get-policies” and look for something like “int_to_ext_fwd”.
You might want to take a look at this thread and this thread.