Firewalls should be divided into safe areas. This configuration obviously puts both 6 and 7 in the trust zone. If you need to get 6 ports on this 1.22 network segment or this ip, you must make a policy route, select this route with acl or prefix list, and then write a policy release.