Sorry I'm not sure what you mean.
The WatchGuard rule uses the last octet of the public subnet and then forwards that particular packet to the last octet of the private subnet.
I am just looking for a way to do this for an entire public /24 to an entire private /24.
Cheers,
Jacob.