
config defaults
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option flow_offloading '1'
	option synflood_protect '1'

config zone
	option name 'Server1'
	list network 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'Server2'
	list network 'server2'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'Ubqt'
	list network 'ubnt'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'admin'
	list network 'admin'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'wan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option mtu_fix '1'
	list network 'wan'

config forwarding
	option src 'Server1'
	option dest 'wan'

config forwarding
	option src 'Server2'
	option dest 'wan'

config forwarding
	option src 'Ubqt'
	option dest 'wan'

config forwarding
	option src 'admin'
	option dest 'wan'

config forwarding
	option src 'admin'
	option dest 'Server1'

config forwarding
	option src 'admin'
	option dest 'Server2'

config forwarding
	option src 'admin'
	option dest 'Ubqt'

config rule
	option name 'Allow-Ping'
	option src 'wan'
	option proto 'icmp'
	option family 'ipv4'
	option target 'ACCEPT'
	list icmp_type 'echo-request'

config nat
	option name 'SNAT-Server1-149'
	option src 'wan'
	option src_ip '192.168.1.0/24'
	option target 'SNAT'
	option snat_ip '194.24.244.149'
	option family 'ipv4'
	list proto 'all'

config nat
	option name 'SNAT-Serwer2-150'
	option src 'wan'
	option src_ip '192.168.2.0/24'
	option target 'SNAT'
	option snat_ip '194.24.244.150'
	option family 'ipv4'
	list proto 'all'

config nat
	option name 'SNAT-UBQT-147'
	option src 'wan'
	option src_ip '192.168.12.0/24'
	option target 'SNAT'
	option snat_ip '194.24.244.147'
	option family 'ipv4'
	list proto 'all'

config nat
	option name 'SNAT-ADMIN-149'
	option src 'wan'
	option src_ip '192.168.10.0/24'
	option target 'SNAT'
	option snat_ip '194.24.244.149'
	option family 'ipv4'

config redirect
	option name 'Rust'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '28015'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '28015'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'Rust-RCON'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '28016'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '28016'
	option proto 'tcp'
	option target 'DNAT'

config redirect
	option name 'DayZ'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '2302-2305'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '2302-2305'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'SOTF-8766'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '8766'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '8766'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'SOTF-9700'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '9700'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '9700'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'SOTF-27016'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '27016'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '27016'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'H1EMU'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '1115-1117'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '1115-1117'
	option proto 'udp'
	option target 'DNAT'

config redirect
	option name 'Minecraft'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '25565'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '25565'
	option proto 'tcp'
	option target 'DNAT'

config redirect
	option name 'RDP'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '3389'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '3389'
	option proto 'tcp'
	option target 'DNAT'

config redirect
	option name 'Game-27015-27030'
	option src 'wan'
	option src_dip '194.24.244.150'
	option src_dport '27015-27030'
	option dest 'Server2'
	option dest_ip '192.168.2.10'
	option dest_port '27015-27030'
	option proto 'tcp udp'
	option target 'DNAT'

config redirect
	option name 'WEB Console https'
	option src 'wan'
	option src_dip '194.24.244.147'
	option src_dport '443'
	option dest 'Ubqt'
	option dest_ip '192.168.12.1'
	option dest_port '443'
	option proto 'tcp udp'
	option target 'DNAT'

config redirect
	option name 'SSH Console 6621'
	option src 'wan'
	option src_dport '22'
	option dest 'Ubqt'
	option dest_ip '192.168.12.1'
	option dest_port '22'
	option target 'DNAT'
	list proto 'tcp'
	option src_dip '194.24.244.147'

