====== Hairpin NAT ======

<code bash>;;; DST-NAT for HTTPS port on web
chain=dstnat action=dst-nat to-addresses=LOCAL_IP_SERVER protocol=tcp in-interface-list=WAN dst-port=443 log=no log-prefix="" 

;;; HAIRPIN NAT fot HTTPS
chain=dstnat action=dst-nat to-addresses=LOCAL_IP_SERVER protocol=tcp src-address=LOCAL_IP_POOL/MASK dstaddress=EXT_IP dst-port=443 log=no log-prefix="" 
chain=srcnat action=masquerade protocol=tcp src-address=LOCAL_IP_POOL/MASK dst-address=LOCAL_IP_SERVER dst-port=443</code>


**LOCAL_IP_SERVER** - локальный IP адрес сервера (службы)\\
**LOCAL_IP_POOL/MASK** - локальный пул IP адресов с маской (1.2.3.4/24)\\
**EXT_IP** - внешний статический IP