How to generally allow traffic from BLUE or ORANGE to GREEN?

Edit the file /var/efw/inithooks/start.local and add the following lines:

#!/bin/sh

. /etc/rc.d/efw_lib.sh

loadconf /var/efw/ethernet/settings
iptables -A DMZHOLES -j ACCEPT -i $BLUE_DEV -o $GREEN_DEV

Note: #!/bin/sh must be the first line within the file and must only be added once. If the file already contains data, don't add this line!

This file will not be touched by upgrades. Check for yourself if features have been added to the firewall if the lines within this start script are still compatible.