/ip firewall nat set [find comment="Hairpin NAT" and dst-address=10.100.1.24 and dst-port=443] out-interface=""
/ip firewall nat set [find comment="Hairpin NAT" and dst-address=10.100.1.24 and dst-port=80] out-interface=""
/ip firewall nat add chain=srcnat action=masquerade protocol=tcp src-address=10.100.1.0/24 dst-address=10.100.1.24 dst-port=443 comment="Hairpin NAT server"
/ip firewall nat add chain=srcnat action=masquerade protocol=tcp src-address=10.100.1.0/24 dst-address=10.100.1.24 dst-port=80 comment="Hairpin NAT server"
/ip firewall nat add chain=srcnat action=masquerade protocol=tcp src-address=100.100.1.0/24 dst-address=10.100.1.24 dst-port=443 comment="Hairpin NAT vpn"
/ip firewall nat add chain=srcnat action=masquerade protocol=tcp src-address=100.100.1.0/24 dst-address=10.100.1.24 dst-port=80 comment="Hairpin NAT vpn"