Help Routing on a Fortigate-100

I am in the process of setting up my Fortigate-100 and I am having some
issues getting one of my routes to work properly.  I am fully able to route
from the Internal Interface > DMZ and External.   However, I cannot route
from DMZ > External.  I am only going to route explicit traffic to the
Internal network.

 

My config is as follows.

 

Internal Interface - 10.1.1.1/24

External Interface - 192.168.0.100/24

DMZ Interface - 10.0.1.1/24

 

I have setup 3 static routes as follows w/ the following firewall rules.

 

#              IP     Subnet    Gateway          Interface        Distance

1          0.0.0.0 0.0.0.0 192.168.0.1       external             10


2          0.0.0.0 0.0.0.0 192.168.0.1       internal             10


3          0.0.0.0 0.0.0.0 192.168.0.1       dmz                  10

 

    edit 1

        set srcintf "internal"

        set dstintf "external"

        set srcaddr "all"

        set dstaddr "all"

        set action accept

        set schedule "always"

        set service "ANY"

        set profile_status enable

        set profile "web"

        set nat enable

    next

    edit 2

        set srcintf "internal"

        set dstintf "dmz"

        set srcaddr "all"

        set dstaddr "all"

        set action accept

        set schedule "always"

        set service "ANY"

    next

    edit 3

        set srcintf "dmz"

        set dstintf "external"

        set srcaddr "all"

        set dstaddr "all"

        set action accept

        set schedule "always"

        set service "ANY"

    next

end