Okay, so I've gotten everything running = fine in my=20 tables as far as HTTP, SSH and POP go, but I'm having a problem with = SMTP (I=20 have a qmail server). I can send SMTP out just fine, but no other = server=20 can send it in for some reason. It would appear in the logs that = it is=20 forwarding fine, but it is still not allowing connections on port = 25. My=20 setup is Public Interface: eth0 - 10.10.10.254 Private Interface eth1 -=20 192.168.77.1 My firewall also serves as a gateway for the private = LAN and=20 a VPN server running FreeSWAN. The MX records are set up to point = at=20 10.10.10.252 as the mail server and as you can see below, that is indeed = forwarding (or at least it should be). I've always assumed that = the=20 numbers in the brackets were port allowances and that may be my problem, = but=20 if they were, I wouldn't be able to get to SSH and HTTP. Also, = if=20 anyone has any security suggestions, since I just cobbled this together = to get=20 it working, they wouldn't fall on deaf ears.

*nat
:PREROUTING ACCEPT=20 [241:88600]
:POSTROUTING ACCEPT [0:9862]
:OUTPUT ACCEPT = [68:4275]
-A=20 PREROUTING -d 10.10.10.252 -p tcp -m tcp --dport 110 -j DNAT = --to-destination=20 192.168.77.2
-A PREROUTING -d 10.10.10.252 -p tcp -m tcp --dport 25 = -j DNAT=20 --to-destination 192.168.77.2
-A PREROUTING -d 10.10.10.251 -p tcp -m = tcp=20 --dport 80 -j DNAT --to-destination 192.168.77.2
-A PREROUTING -d=20 10.10.10.250 -p tcp -m tcp --dport 80 -j DNAT --to-destination=20 192.168.77.2
-A PREROUTING -d 10.10.10.250 -p tcp -m tcp --dport 22 = -j DNAT=20 --to-destination 192.168.77.2
-A POSTROUTING -o eth0 -j SNAT = --to-source=20 10.10.10.254
-A POSTROUTING -o eth1 -j SNAT --to-source=20 10.10.10.254
COMMIT

*filter
:INPUT ACCEPT = [0:229546]
:FORWARD=20 ACCEPT [363:1553786]
:OUTPUT ACCEPT [2:619341]
-A INPUT -p udp -m = udp=20 --sport 500 --dport 500 -j ACCEPT
-A INPUT -p tcp -j ACCEPT
-A = INPUT -p=20 esp -j ACCEPT
-A INPUT -p ah -j ACCEPT
-A INPUT -i lo -j = ACCEPT
-A=20 FORWARD -i eth1 -j ACCEPT
-A FORWARD -i eth0 -o eth1 -p tcp -m tcp = --dport=20 110 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i = eth0 -o=20 eth1 -p tcp -m tcp --dport 25 -m state --state NEW,RELATED,ESTABLISHED = -j=20 ACCEPT
-A FORWARD -i eth0 -o eth1 -p tcp -m tcp --dport 80 -m state = --state=20 NEW,RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth0 -o eth1 -p tcp = -m tcp=20 --dport 22 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A = OUTPUT -p=20 udp -m udp --sport 500 --dport 500 -j ACCEPT
-A OUTPUT -p tcp -j = ACCEPT
-A=20 OUTPUT -p esp -j ACCEPT
-A OUTPUT -p ah -j ACCEPT
-A OUTPUT -o lo = -j=20 ACCEPT
COMMIT