i got it after tweaking around … 🙂
its not pretty but it works ( at least for me ) 🙂
just add the folowing to post boot script
iptables -A CapPortFS -d IP_destination -j ACCEPT
iptables -t nat -I CapPortGW 1 -d IP_destination -j ACCEPT
iptables -t nat -I CapPortHTTPS 1 -d IP_destination -j ACCEPT
iptables -t nat -I CapPortHTTP 1 -d IP_destination -j ACCEPT
and then restart
thnks for this superb firewall ..