You don't, I don't think it actually does anything looking at it now. The new iteration of this config I am using doesn't have it.can someone expain what this line exactly does? why we need it? what traffic accept?
add chain=prerouting dst-address-list=!LAN src-address-list=LAN