Fichier /etc/config/firewall:

config redirect
        option src              lan
        option proto            tcp
        option src_dport        80
        option src_dip          !192.168.2.254
        option dest_port        3128
        option dest_ip          192.168.99.1
        option target           DNAT