Hi.
Can somebody help me with this problem?
I have setup Hotspot on gateway and it works. But now I need to forward some ports to internal server. I have a little knolege how work firewall chains and can't undestand rules wich was created by Hotspot. I have tried to add rules for dst-nat and on other interface it works, but on Hotspot interface it doesn't. Please help me with this or give me a direction to find more information about all theese rules in firewall.

if you have an internal server connected to a hotspot interface, you will need to bind the internal IP address or mac address of the NIC to be bypassed by the hotspot - then your normal rules should work just fine.

Thank you for reply.
But it not acceptable for me. This server is terminal server and I want only RDP traffic to be bypassed. But user should be authenticated for working in internet. Is it possible?