thanks to all, problem solved by myself with this NAT rules
http://project.eraps.ru/knowledgebase/articles/13
it doesnot working!Should be something like this:
Code: Select all/ip firewall nat add chain=srcnat src-address=192.168.0.0/24 dst-address=192.168.0.2 protocol=tcp dst-port=80 action=masquerade