there are rules that it doesn’t clear but there that understand well the flow and traffic origin or destination, example it:
rule 1000 {
description “NAT HTTP(S) Inside”
destination {
address 10.10.4.0/24
}
outbound-interface eth1.40
protocol tcp_udp
source {
address 10.10.4.0/24
}
translation {
address masquerade
}
}
rule 1001 {
destination {
address 192.168.1.0/24
}
outbound-interface eth1
protocol tcp_udp
source {
address 192.168.2.0/24
}
translation {
address masquerade
}
but is a good idea check with tcpdump and the conntrack states when you do your test .