config defaults
	option syn_flood '1'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option disable_ipv6 '1'

config zone
	option name 'Server1'
	list network 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'Server2'
	list network 'server2'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'Ubqt'
	list network 'ubnt'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'admin'
	list network 'admin'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'wan'
	list network 'wan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option mtu_fix '1'

config forwarding
	option src 'Server1'
	option dest 'wan'

config forwarding
	option src 'Server2'
	option dest 'wan'

config forwarding
	option src 'Ubqt'
	option dest 'wan'

config forwarding
	option src 'admin'
	option dest 'wan'

config forwarding
	option src 'admin'
	option dest 'Server1'

config forwarding
	option src 'admin'
	option dest 'Server2'

config forwarding
	option src 'admin'
	option dest 'Ubqt'

config rule
	option name 'Allow-Ping'
	option src 'wan'
	option proto 'icmp'
	option icmp_type 'echo-request'
	option family 'ipv4'
	option target 'ACCEPT'

config nat
	option name 'SNAT-Server1-149'
	option src 'wan'
	option src_ip '192.168.1.0/24'
	option target 'SNAT'
	option snat_ip '194.24.244.149'
	option family 'ipv4'
	option proto 'all'

config nat
	option name 'SNAT-Serwer2-150'
	option src 'wan'
	option src_ip '192.168.2.0/24'
	option target 'SNAT'
	option snat_ip '194.24.244.150'
	option family 'ipv4'
	option proto 'all'

config nat
	option name 'SNAT-UBQT-147'
	option src 'wan'
	option src_ip '192.168.12.0/24'
	option target 'SNAT'
	option snat_ip '194.24.244.147'
	option family 'ipv4'
	option proto 'all'

config nat
	option name 'SNAT-ADMIN-149'
	option src 'wan'
	option src_ip '192.168.10.0/24'
	option target 'SNAT'
	option snat_ip '194.24.244.149'
	option family 'ipv4'
	option proto 'all'

config redirect
	option name 'Rust'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '28015'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '28015'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'Rust-RCON'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '28016'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '28016'
	option proto 'tcp'
	option target 'DNAT'

config redirect
	option name 'DayZ'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '2302-2305'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '2302-2305'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'SOTF-8766'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '8766'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '8766'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'SOTF-9700'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '9700'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '9700'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'SOTF-27016'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '27016'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '27016'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'H1EMU'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '1115-1117'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '1115-1117'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'Minecraft'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '25565'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '25565'
	option proto 'tcp'
	option target 'DNAT'

config redirect
	option name 'RDP'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '3389'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '3389'
	option proto 'tcp'
	option target 'DNAT'

config redirect
	option name 'Game-27015-27030'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '27015-27030'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '27015-27030'
	option proto 'tcp udp'
	option target 'DNAT'

config redirect
	option name 'WEB Console https'
	option src 'wan'
	option src_dip '194.24.244.147'
	option src_dport '443'
	option dest 'Ubqt'
	option dest_ip '192.168.12.1'
	option dest_port '443'
	option proto 'tcp udp'
	option target 'DNAT'

config redirect
	option name 'SSH Console 6621'
	option src 'wan'
	option src_dip '194.24.244.147'
	option src_dport '22'
	option dest 'Ubqt'
	option dest_ip '192.168.12.1'
	option dest_port '22'
	option proto 'tcp'
	option target 'DNAT'

config include
	option path '/etc/firewall.user'
