Please help w/ firewall and nat rules

Hi folks.

I’m a little bit noob in networking. I have this devices online and working:

  1. rb450g firm. v2.39 w/ OS 5.18 - it gets static IP from provider on ent1.
  2. omnitik 5hd firm. v2.39 w/ OS 5.18 - it’s a station bridge on ent2
  3. SXT firm. v 2.39 w/ OS 5.18 - it’s a client bridge w/ omnitik
    ent3/ent4 at rb450g is for local machines
    SXT is connected to a second network

I have a bandwidth up to 80Mbps wireless tcp up/down via local machines and second network. I did setup of 1,2,3 following basic wiki and youtube movies. Now i want add smth like port forwarding between out of rb450g to local machines and second network and make IP TV (udp) workining behind my rb450g. I guess this is only a firewall issue.

I searched forum for firewall/nat rules BUT can someone tell me on thingers what rules i actually need, here is some info, at rb450g i have (port forwarding/ip tv not working behind it):

Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Added by webbox
chain=input action=accept protocol=icmp

1 ;;; Added by webbox
chain=input action=accept connection-state=established in-interface=ether1

2 ;;; Added by webbox
chain=input action=accept connection-state=related in-interface=ether1

3 ;;; Added by webbox
chain=input action=drop in-interface=ether1

4 ;;; Added by webbox
chain=forward action=jump jump-target=customer in-interface=ether1

5 ;;; Added by webbox
chain=customer action=accept connection-state=established

6 ;;; Added by webbox
chain=customer action=accept connection-state=related

7 ;;; Added by webbox


Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Added by webbox
chain=input action=accept protocol=icmp

1 ;;; Added by webbox
chain=input action=accept connection-state=established in-interface=ether1

2 ;;; Added by webbox
chain=input action=accept connection-state=related in-interface=ether1

3 ;;; Added by webbox
chain=input action=drop in-interface=ether1

4 ;;; Added by webbox
chain=forward action=jump jump-target=customer in-interface=ether1

5 ;;; Added by webbox
chain=customer action=accept connection-state=established

6 ;;; Added by webbox
chain=customer action=accept connection-state=related

7 ;;; Added by webbox

Thx,
NIO