I have several interfaces: lan \ wan \ br0,1,2 \ tun0,1. and
several WiFi interfaces ath0, ath0.1.
because of the specificity of work - enabled router.
must have a WiFi network. for it is necessary to add a nat. but because of the "router" - the rules do not work DNAt \ snat \ MASQUERADE