А можно правило NAT в сдудию?
add action=dst-nat chain=dstnat comment=rdp !connection-bytes !connection-limit !connection-mark !connection-rate !connection-type !content \
disabled=no !dscp dst-address=2.2.2.2 !dst-address-list !dst-address-type !dst-limit dst-port=2.2.2.2 !fragment !hotspot !icmp-options \
!in-bridge-port !in-bridge-port-list !in-interface !in-interface-list !ingress-priority !ipsec-policy !ipv4-options !layer7-protocol !limit log=yes \
log-prefix="" !nth !out-bridge-port !out-bridge-port-list !out-interface !out-interface-list !packet-mark !packet-size !per-connection-classifier \
!port !priority protocol=tcp !psd !random !routing-mark !routing-table !src-address !src-address-list !src-address-type !src-mac-address !src-port \
!tcp-mss !time to-addresses=1.1.1.1 to-ports=3389 !ttl
у меня вот такое работает.