-----------------------------------------
Подумал, убрал маскарад, сделал вот так
set firewall name br0local rule 10 action accept
set firewall name br0local rule 10 protocol udp
set firewall name br0local rule 10 destination port 67
set firewall name br0local rule 10 source port 68
set...