iptables prerouting

[Ladislav Kaderják]

mam situaciu:
RH7.1
iptables-1.2.1a-1
2.4.3-SGI_XFS_1.0.1

                   -------------------------------------------
                   |                                         |  
---10.6.100.0/24---|10.6.100.200    192.168.100.200   real-IP|-----INET-----
                   |eth0             eth1               eth2 |
                   -------------------------------------------
                                       |
                                 192.168.100.0/24
                                       |
                                 192.168.100.1(mail,pop3,imap)
                                       |

a pravidla:
-A PREROUTING -d 10.6.100.200 -p tcp -m tcp --dport 110 -j DNAT --to-destination 192.168.100.1:110
-A PREROUTING -d real-IP -p tcp -m tcp --dport 110 -j DNAT --to-destination 192.168.100.1:110
-A POSTROUTING -o eth2 -j MASQUERADE 
-A POSTROUTING -o eth0 -j MASQUERADE

z INET "telnet real-IP 110" funguje (pop3 klienti funguju)
z 10.6.100.0/24 "telnet 10.6.100.200 110" nie

192.168.100.1 je nejaky ms exchange na ktory nemam dosah, ale vraj "standartna instalacia"

vie niekto v com by mohol byt problem ?
( pre tych ktory chcu odpovedat iba "ano", mohli by ste poradit aky ? )


-- 
laco na unicom.sk Ladislav Kaderjak
www.unicom.sk  UNICOM Computer & Telematic, s.r.o.