Hello, thanks for advise, i dumped packets on wan input:
16:17:31.898460 IP 10.42.168.112.63676 > 10.231.64.1.8000: Flags [S], seq 2257517421, win 64896, options [mss 1344,nop,wscale 8,nop,nop,sackOK], length 0
and also on LAN side:
16:14:30.818204 IP 10.42.168.112.63647 > 10.0.0.1.80: Flags [S], seq 1048613152, win 64896, options [mss 1344,nop,wscale 8,nop,nop,sackOK], length 0
And it shows that packets/ports are forwarded by TRB 140 as requiered, and also here we saw the problem why connection is not working. Source address is from different network 10.42.x.x and WEB on 10.0.0.1:80 sends answer back wia default GW not wia my TRB on 10.0.011. I tryed to write NAT rule from WAN to LAN to change source address and it seems to be working.
Thank you very much for help a reasonable advise
Best regards Vladimír