FORWARD parameter*  ==  FORWARD=gatewayURL[-_-connMap]
        gatewayURL  ==  gwproto://[user:pass@]gwhost[:gwport]
           connMap  ==  protoList:dstHostList:srcHostList
                    --  default: none

Forwards a request toward a proxy server specified in gatewayURL if the request matches the condition specified in connMap, that is, the request is in a protocol listed in protoList and for servers listed in dstHostList and from clients in srcHostList. If connMap is omitted, any request are forwarded to the gatewayURL unconditionally. If an authentication information is given as "user:pass@" prefixed to gwhost, it is used on the authentication phase after the connection with the gwhost.
FORWARD is a generalized notation of ROUTE and the following two notations are equivalent.
ROUTE=gwproto://gwhost:gwport/-_-dstHostList:srcHostList
FORWARD=gwproto://gwhost:gwport/-_-*:dstHostList:srcProtoList

For special gwproto, FORWARD works as a generalized notation of MASTER, PROXY, SOCKS and SSLTUNNEL as follows.

delegate -- forward to a DeleGate

MASTER=gwhost:gwport:dstHostList
FORWARD=delegate://gwhost:gwport/-_-*:dstHostList:*

http, ftp, telnet -- forward to an application level proxy (HTTP, FTP, or Telnet)

PROXY=gwhost:gwport:dstHostList
FORWARD=gwproto://gwhost:gwport/-_-*:dstHostList:*

socks -- forward to a SOCKS server

SOCKS=gwhost:gwport[/socksOpt]:dstHostList:srcHostList
FORWARD=socks://gwhost:gwport[/socksOpt]-_-*:dstHostList:srcHostList

ssltunnel -- forward to a SSL-tunnel (HTTP proxy with the CONNECT method)

SSLTUNNEL=gwhost:gwport
FORWARD="ssltunnel://gwhost:gwport/-_-*:*:*"

direct -- directly connect to the server

CONNECT="direct:protoList:dstHostList:srcHostList"
FORWARD="direct-_-protoList:dstHostList:srcHostList"

noroute -- don't try connection to the server

CONNECT="cache:protoList:dstHostList:srcHostList"
FORWARD="noroute-_-protoList:dstHostList:srcHostList"

If multiple FORWARD parameters are specified, they are tried in the order of the definition. If multiple routes to the destination server are available, specified with a mixture of FORWARD and other parameters (MASTER, PROXY, SOCKS or SSLTUNNEL), the route defined by FORWARD is tried in precedence defined by "proxy" or "master" in CONNECT.

Example: a gateway for HTTP clients to a HTTPS server reachable via SSLtunnel with authentication

MOUNT="/* https://sslhost/*"
STLS=fsv:https:sslhost
FORWARD=ssltunnel://user:pass@proxyhost:8080-_-https:sslhost