config defaults
	option syn_flood '1'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'lan'
	list network 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'

config zone
	option name 'wan'
	list network 'wan'
	list network 'wan6'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option masq '1'
	option mtu_fix '1'

config forwarding
	option src 'lan'
	option dest 'wan'

<...skipped some DHCP/ICMP/whatnot rules ...>

config redirect
	option name '1234'
	option enabled '1'
	option target 'DNAT'
	option proto 'tcp udp'
	option src 'wan'
	option src_dport '1234'
	option dest 'lan'
	option dest_ip '192.168.1.3'
	option dest_port '1234'