Добрый день.
Необходимо пробросить tcp 3389 в локалку на ip 192.168.11.245
Проброс делаю через dnat
Правила фаервола
;;; Input
chain=input action=accept connection-state=established,related log=no
;;; DNS
chain=input action=accept protocol=udp in-interface-list=LAN dst-port=53
chain=input action=accept protocol=tcp in-interface-list=LAN dst-port=8291
chain=input action=accept protocol=tcp in-interface-list=LAN dst-port=80
chain=input action=accept protocol=icmp in-interface=bridge1 log=no
;;; drop all input
chain=input action=drop connection-state=invalid
chain=input action=drop log=no
chain=forward action=accept connection-state=established,related log=no
chain=forward action=accept protocol=tcp dst-address=192.168.11.245
in-interface-list=WAN dst-port=3389 log=no log-prefix="rdp"
chain=forward action=accept in-interface-list=LAN out-interface-list=WAN
log=no log-prefix=""
;;; drop all forward
chain=forward action=drop connection-state=invalid log=no log-prefix=""
chain=forward action=drop log=no log-prefix=""
Проброс не работает подскажите что не так делаю ?