> 3. Rules: added and applied changes.
> TCP src: aaa.bbb.ccc.239 HTTP dest: xxx.yyy.zzz.10 HTTP
> TCP src: aaa.bbb.ccc.240 HTTP dest: xxx.yyy.zzz.20 HTTP
I think that only DESTINATION port is 80, 'source' port should be 'any'
for both servers.
Again, source IP address should be 'any', too.
Hint: why not use the "Auto-add a firewall rule to permit traffic
through this NAT rule" checkbox?