?DMZ Pinhole?

My network is running Smoothwall Express 2.0, it has a red, green, and orange (DMZ) interface on it. I have a webserver on the orange interface (DMZ) and I wish to access it via ssh on the green interface. Last night I could log into the webserver with ssh, but today ssh just hangs when I try to log in. I know it works because I can log in via the smoothwall router. Do I need to open up a DMZ hole between the green and orange networks? I'm told this is a security risk so I'm hesitent to do so. Also of note, at the moment the webserver on the orange (DMZ) interface does not have an outlet to the red interface.

Figured it out....boy that was dumb....I didn't have a hole in the firewall on my laptop, that's why I couldn't connect to it. Wow that was stupid.

Fear not, we all have these forehead slapping moments..
Ask Chris how I tweaked SSH once for a good laugh

Cheers,