0 X ;;; place hotspot rules here
     chain=unused-hs-chain action=passthrough

 1   ;;; Masquarade Lan
     chain=srcnat action=masquerade src-address=192.168.10.0/24
     out-interface=Tazmania

 2   ;;; Masquarade HotSpot
     chain=srcnat action=masquerade src-address=192.168.1.0/24
     out-interface=Tazmania

 3   ;;; Masquarade Proxy Squid
     chain=srcnat action=masquerade src-address=192.168.2.0/24
     out-interface=Tazmania

 4 X chain=srcnat action=masquerade out-interface=Squid

 5 X ;;; Redirect to Proxy
     chain=dstnat action=dst-nat to-addresses=192.168.2.2 to-ports=3128
     protocol=tcp src-address=!192.168.2.2 in-interface=Taz AP dst-port=80

 6 X chain=dstnat action=dst-nat to-addresses=192.168.2.2 to-ports=3128
     protocol=tcp src-address=!192.168.2.2 src-address-list=client 1
     in-interface=Lan dst-port=80