Hi everybody,
I have a little problem to understand how to manage a device (AP) behind coovaap. My network is:

Internet--------------coovaap-----------AP(ubnt)

The configuration of coovaap is:

wan_unit=0
wan_device=vlan1
wan_get_dns=
wan_run_mtu=1500
wan_web_admin=both
wan_lease=86400
wan_gateway=192.168.1.1
wan_hwname=
wan_domain=
wan_netmask=255.255.255.0
wan_dns=212.216.112.112 151.1.1.1
wan_proto=static
wan_hwaddr=
wan_ifnames=vlan1
wan_primary=1
wan_gateway_buf=0.0.0.0
wan_iface=vlan1
wan_ipaddr=192.168.1.2
wan_wins=
wan_ssh_admin=on
wan_speed=4
wan_mtu=1500
wan_get_domain=
wan_ifname=vlan1
wan_hostname=Won_
lan_domain=
lan_route=
lan_netmask=255.255.255.0
lan_lease=86400
lan_stp=0
lan_dhcp=0
lan_hwaddr=
lan_ifnames=vlan0 eth1 eth2
lan_dns=
lan_ipaddr=10.1.0.1
lan_proto=static
lan_ifname=br0
lan_wins=
lan_hwnames=
wl0_net_mode=mixed
wl0_frameburst=off
wl0_wep_buf=
wl0_akm=none
wl0_macmode1=disabled
wl0_infra=1
wl0_country_code=ALL
wl0_wme_sta_be=15 1023 3 0 0 off
wl0_ifname=eth1
wl0_wme_sta_bk=15 1023 7 0 0 off
wl0_mrate=0
wl0_mode=ap
wl0_ap_isolate=0
wl0_gmode=1
wl0_wme_no_ack=off
wl0_wep_last=
wl0_ssid=xxxxxxxx
wl0_dtim=1
wl0_key1=
wl0_key2=
wl0_key3=
wl0_key4=
wl0_wme_ap_vi=7 15 1 6016 3008 off
wl0_closed=0
wl0_rate=0
wl0_plcphdr=long
wl0_macmode=disabled
wl0_radioids=BCM2050
wl0_wme_ap_vo=3 7 1 3264 1504 off
wl0_phytype=g
wl0_lazywds=0
wl0_afterburner=off
wl0_antdiv=-1
wl0_wpa_psk=
wl0_mac_list=
wl0_unit=0
wl0_txpwr=100
wl0_net_reauth=36000
wl0_wds=
wl0_mac_deny=
wl0_auth=0
wl0_wme=off
wl0_radius_port=1812
wl0_radius_ipaddr=
wl0_wme_sta_vi=7 15 2 6016 3008 off
wl0_wme_sta_vo=3 7 2 3264 1504 off
wl0_maxassoc=128
wl0_phytypes=g
wl0_wep=disabled
wl0_frag=2346
wl0_country=Worldwide
wl0_rateset=default
wl0_wep_bit=64
wl0_passphrase=
wl0_rts=2347
wl0_wpa_gtk_rekey=3600
wl0_key=1
wl0_active_mac=
wl0_radio=1
wl0_bcn=100
wl0_hwaddr=
wl0_wep_gen=
wl0_gmode_protection=off
wl0_maclist=
wl0_radius_key=
wl0_wme_ap_be=15 63 3 0 0 off
wl0_corerev=9
wl0_channel=10
wl0_wds_timeout=1
wl0_wme_ap_bk=15 1023 7 0 0 off
wl0_auth_mode=none
wl0_crypto=tkip
wl_mac_deny=
wl_radius_port=1812
wl_maxassoc=128
wl_phytypes=
wl_infra=1
wl_radius_ipaddr=
wl_net_reauth=36000
wl_mrate=0
wl_akm=
wl_active_add_mac=0
wl_gmode=1
wl_wme_sta_vi=7 15 2 6016 3008 off
wl_wme_ap_be=15 63 3 0 0 off
wl_plcphdr=long
wl_wme_sta_vo=3 7 2 3264 1504 off
wl_macmode=disabled
wl_wme_ap_bk=15 1023 7 0 0 off
wl_phytype=g
wl_lazywds=1
wl_auth_mode=none
wl_wpa_psk=
wl_mode=ap
wl_wpa_gtk_rekey=3600
wl_wds_timeout=1
wl_ssid=linksys
wl_dtim=1
wl_passphrase=
wl_key1=
wl_key2=
wl_key3=
wl_country_code=ALL
wl_key4=
wl_hwaddr=
wl_net_mode=mixed
wl_active_mac=
wl_rate=0
wl_macmode1=disabled
wl_country=Worldwide
wl_rateset=default
wl_crypto=tkip
wl_wep_bit=64
wl_radius_key=
wl_unit=0
wl_wds=
wl_wme=off
wl_wme_ap_vi=7 15 1 6016 3008 off
wl_auth=0
wl_wep_last=
wl_wme_ap_vo=3 7 1 3264 1504 off
wl_frameburst=off
wl_ifname=
wl_wep=disabled
wl_gmode_protection=off
wl_frag=2346
wl_wep_gen=
wl_maclist=
wl_wme_sta_be=15 1023 3 0 0 off
wl_radioids=
wl_corerev=
wl_channel=11
wl_wme_sta_bk=15 1023 7 0 0 off
wl_radio=1
wl_afterburner=off
wl_rts=2347
wl_ap_isolate=0
wl_mac_list=
wl_wme_no_ack=off
wl_key=1
wl_closed=0
wl_bcn=100
wl_wep_buf=
wl_antdiv=-1
dhcp_start=10
dhcp_lease=0
dhcp_wins=wan
dhcp_onboot=on
dhcp_domain=wan
dhcp_num=150
ipkg_wifidog=on
pptp_server_ip=
pptp_get_ip=
pptp_pass=1
ppp_passwd=
ppp_idletime=5
ppp_get_ac=
ppp_username=
ppp_redialperiod=30
ppp_service=
ppp_demand=1
ppp_keepalive=0
ppp_static_ip=
ppp_mru=1500
ppp_ac=
ppp_get_srv=
ppp_mtu=1500
ppp_static=0
wifi_netmask=
wifi_ifnames=
wifi_proto=
wifi_ipaddr=
wifi_ifname=
ddns_username_2=
ddns_enable=1
ddns_hostname_buf=
ddns_wildcard=OFF
ddns_enable_buf=
ddns_hostname=xxxxxxxxxxx
ddns_password=xxxxxxxxx
ddns_backmx=NO
ddns_cache=
ddns_service=dyndns
ddns_change=
ddns_passwd_2=
ddns_username=xxxxxxx
ddns_passwd=
ddns_hostname_2=
ddns_mx=
ddns_interval=60
ddns_service_type=dyndns
ddns_passwd_buf=
ddns_username_buf=
ddns_status=
hs_uamsecret=xxxxxxx
hs_natanyip=on
hs_uamformat=http://$HS_UAMSERVER/uam/
hs_macallow=
hs_owner_email=
hs_defsessiontimeout=0
hs_defidletimeout=0
hs_uamdomains=0
hs_type=chillispot
hs_dynip=10.1.0.0
hs_uamallow= 0
hs_macauth=off
hs_radconf_authport=1812
hs_openidauth=off
hs_radauth=1812
hs_ssh_admin=on
hs_uamhomepage=http://$HS_UAMLISTEN:$HS_UAMPORT/www/coova.html
hs_network=192.168.222.0
hs_radconf_server=rad01.coova.org
hs_latitude=40.340
hs_radconf_pwd=xxxxxx
hs_provider=xxxx
hs_loc_name=My HotSpot
hs_adminterval=3600
hs_loc_isocc=380
hs_nasid=68-7F-74-15-EE-2E
hs_macreauth=off
hs_radconf_url=https://192.168.1.42/config/tos.conf
hs_dns1=208.67.222.222
hs_dns2=208.67.220.220
hs_reg_mode=off
hs_radconf_user=coova-ap-tos
hs_uselocalusers=off
hs_longitude=14.990
hs_radconf_secret=coova-anonymous
hs_reg_proto=http
hs_smtp_meth=none
hs_wpaguests=off
hs_loc_addr=0
hs_wwwdir=/etc/chilli/www
hs_web_admin=both
hs_loc_network=xxxxx
hs_admpwd=xxxxxx
hs_uamlisten=192.168.222.1
hs_radius=radius.xxxxxx
hs_uamserver=uam.xxxxx
hs_uamport=3660
hs_provider_link=http://www.xxxxxxxx.it/
hs_radsecret=xxxxxxx
hs_anyip=on
hs_lan_access=allow
hs_macauthmode=local
hs_noc2c=off
hs_loc_cc=39
hs_definteriminterval=300
hs_mode=combined
hs_admusr=chillispot
hs_radconf=off
hs_radacct=1813
boot_wait=off

All works very fine but I need to controll a access point behind coovap. The hotspot network have a 10.1.0.0 subnet and the AP have 10.1.0.2 ip address. If the hotspot service is disable I connect to the access point without any problem but If actve the hotspot service I don't have any controll.
In the firewall tablet I have insert this forward role:

Protocol: tcp
Destination Ports: 6004 10.1.0.2 80

Can you help me?

Tx in advance