This is what Layer 3 is for. You need to open the relevant port between vlans (e.g. TCP 443 for https) on the firewall. I think its UDP 1900 but may vary by appliance.
I’d also allow multicast, ICMP (ping) and DNS between your vlans as a minimum depending on what they’re used for.
I used to use all the Simple tools, even paid for them, unfortunately the dev changed monetization to a shitty model and I got locked out.
Since then I moved to QKSMS. Its on F-Droid and despite some initial quirks I’m very happy with it.
It is just water. When the engine starts the cold exhaust heats up creating condensation which drips off as the exhaust fumes are expelled.
It “can” be oil, but you’d need to be pretty unlucky, and need a new engine.
I already have them blocked
Have you ever seen the opening credits to Duck Tales?
That.