#gdzie siec jest na 192.168.88.0/24
/ip firewall nat
add action=dst-nat chain=dstnat comment="Debian HTTPS" dst-address-type=local \
    dst-port=443 protocol=tcp to-addresses=192.168.88.246 to-ports=443
add action=masquerade chain=srcnat comment="Debian HTTPS hairpin" \
    dst-address=192.168.88.246 dst-port=443 out-interface=bridge protocol=tcp \
    src-address=192.168.88.0/24