D-Link DFL-2500 - Manual (Page 225)

Action Src Interface Src Network Dest Interface Dest Network Service
1 Allow lan lannet core lan_ip http-all
2 NAT lan trusted_users wan all-nets http-all
3 NAT lan lannet wan all-nets dns-all
4 SAT lan lannet wan all-nets
all-to-one
127.0.0.1 http-all
5 Allow lan lannet wan all-nets http-all
The SAT rule catches all unauthenticated requests and must be set up with an all-to-one address
mapping that directs them to the address 127.0.0.1 which corresponds to core (NetDefendOS itself).
8.2.6. HTTP Authentication Chapter 8. User Authentication
225