*********************i dont know the sorting is right or not....
0 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough
1 chain=forward action=fasttrack-connection connection-state=established,related
2 ;;; natted connection are accepted
chain=forward action=accept connection-state=established,related connection-nat-state=dstnat
in-interface=ether1 log=no log-prefix=""
3 ;;; Drop new connections from internet which are not dst-natted
chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface=ether1 log=yes
log-prefix=""
0 ;;; NAT LOOPBACK
chain=srcnat action=masquerade src-address=192.168.1.0/24 out-interface=ether1 log=no log-prefix=""
ipsec-policy=out,none
1 ;;; NAS Web
chain=dstnat action=dst-nat to-addresses=192.168.1.100 to-ports=8080 protocol=tcp in-interface=ether1
dst-port=8100 log=yes log-prefix=""
2 ;;; AP Web
chain=dstnat action=dst-nat to-addresses=192.168.1.99 to-ports=80 protocol=tcp in-interface=ether1
dst-port=8099 log=yes log-prefix=""