/ip firewall natadd action=dst-nat chain=dstnat comment="DNS Admin" dst-port=53 protocol=udp \ src-address-list=Admin to-addresses=8.8.8.8 to-ports=53add action=dst-nat chain=dstnat dst-port=53 protocol=tcp \ src-address-list=Admin to-addresses=8.8.8.8 to-ports=53add action=dst-nat chain=dstnat comment="DNS Clients" dst-port=53 protocol=udp \ src-address-list=!Admin to-addresses=192.168.100.1 to-ports=53add action=dst-nat chain=dstnat dst-port=53 protocol=tcp \ src-address-list=!Admin to-addresses=192.168.100.1 to-ports=53/ip dnsset allow-remote-requests=yes servers=180.131.144.144,180.131.145.145/ip dns staticadd address=192.168.100.1 name=internal.gateway.lan/ip firewall address-listadd address=192.168.100.201 list=Adminadd address=192.168.100.202 list=Adminadd address=192.168.100.203 list=Admin