diff --git a/rules/11-pht-forwards b/rules/11-pht-forwards
new file mode 100644
index 0000000..6a28d80
--- /dev/null
+++ b/rules/11-pht-forwards
@@ -0,0 +1,6 @@
+#!/bin/bash
+rules() {
+    if ${HAVE_WAN2}; then
+        iptables -t nat $flag PREROUTING -i ${IF_WAN} -d ${HOST_KASHA_WAN2} -p tcp --dport 666 -j DNAT --to-destination 10.24.0.29:22
+    fi
+}
diff --git a/rules/11-q3k-forwards b/rules/11-q3k-forwards
deleted file mode 100644
index a860041..0000000
--- a/rules/11-q3k-forwards
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-rules() {
-    # xpsp3 rdp
-    # 16283 -> 10.24.17.1:3389 
-    iptables -t nat $flag PREROUTING -i ${IF_WAN} -d ${HOST_KASHA_WAN} -p tcp --dport 16283 -j DNAT --to-destination 10.24.17.1:3389
-    iptables -t filter $flag FORWARD -i ${IF_WAN} -d 10.24.17.1 -p tcp --dport 3389 -j ACCEPT
-    iptables -t filter $flag FORWARD -i ${IF_WAN} -d 10.24.16.1 -p tcp --dport 22 -j ACCEPT
-    iptables -t nat $flag PREROUTING -i ${IF_WAN} -d ${HOST_KASHA_WAN} -p tcp --dport 16284 -j DNAT --to-destination 10.24.16.1:22
-
-}