I eventually solved this problem.
Edit /etc/rc.d/rc.firewall.upAfter the section on “# Allow packets that we know about through …”
Add:
# Allow packets from green to green
/sbin/iptables -A FORWARD -i $GREEN_DEV -o $GREEN_DEV -j ACCEPT
Create:
/var/smoothwall/ethernet/staticroutes
with this in
route add -net 192.168.122.0 netmask 255.255.254.0 gw 192.168.103.2 dev eth0
make sure the file is 755
add this line to /etc/rc.d/rc.netaddress.up
/var/smoothwall/ethernet/staticroutes
Then reboot the smoothwall