Just some random stuff, not a real configuration

firewall.cfg3b3837=redirect
firewall.cfg3b3837.dest=dmz_pub
firewall.cfg3b3837.dest_ip=172.16.10.20
firewall.cfg3b3837.dest_port=22
firewall.cfg3b3837.enabled=1
firewall.cfg3b3837.name=test1
firewall.cfg3b3837.proto=tcp
firewall.cfg3b3837.src=wan
firewall.cfg3b3837.src_dport=2222
firewall.cfg3b3837.target=DNAT

---------------------------------------------------------------

firewall.@redirect[0]=redirect
firewall.@redirect[0].enabled='1'
firewall.@redirect[0].target='DNAT'
firewall.@redirect[0].src='wan'
firewall.@redirect[0].dest='dmz_pub'
firewall.@redirect[0].proto='tcp'
firewall.@redirect[0].src_dport='2222'
firewall.@redirect[0].dest_ip='172.16.10.20'
firewall.@redirect[0].dest_port='22'
firewall.@redirect[0].name='test1'

--------------------------------------------------------------

config redirect
        option target 'DNAT'
        option src 'wan'
        option dest 'dmz_pub'
        option proto 'tcp'
        option src_dport '2222'
        option dest_ip '172.16.10.20'
        option dest_port '22'
        option name 'test1'

irewall.@rule[10]=rule
firewall.@rule[10].target='ACCEPT'
firewall.@rule[10].name='VPN'
firewall.@rule[10].src='lan'
firewall.@rule[10].src_ip='10.14.23.0/24'
firewall.@rule[10].proto='all'

config rule
        option target 'ACCEPT'
        option name 'VPN'
        option src 'lan'
        option src_ip '10.14.23.0/24'
        option proto 'all'