set service "HTTP" protocol tcp src-port 0-65535 dst-port 80-80

set interface untrust vip 61.144.230.45 + 80 HTTP 192.168.3.114

set policy from untrust to trust any vip(61.144.230.45) HTTP permit

save