Very Computer

Here's a stumper. I'm using Debian 2.2 and ipchains to set up a bunch
of services running on a LAN with only one external host doing
port-by-port forwarding to the hosts on the LAN. So,
External IP 24.68.84.12:80  forwarded to --> 192.168.1.2:80
and
External IP 24.68.84.12:25 forwarded to --> 192.168.1.2:25

With a couple of simple statements to ipmasqadm:
ipmasqadm portfw -f
ipmasqadm portfw -a -P tcp -L 24.68.84.12 80 -R 192.168.1.2 80
ipmasqadm portfw -a -P tcp -L 24.68.84.12 25 -R 192.168.1.2 25

this works like a charm in all cases but one-- when the connection is
initiated from a host inside of the LAN. So, if host 192.168.1.10
tries to connect to 24.68.84.12:80, nothing happens. tcpdump shows
that packets are flying about, but the connection is never officially
opened.

I suspect that this has to do with the way that MASQ works in linux,
but I am not sure. I have scoured this list and it seems that the only
thing that comes close in posting is this post:
http://groups.google.com/groups?hl=en&threadm=3a1a4b0e.0%40d2o68.teli...

but there was never an acceptable resolution. Using DNS to
short-circuit the firewall's NAT seems kludgey.

Any help would be greatly appreciated.

Antonio

PS the rest of my rules are set as promiscous as possible for the
purposes of solving this problem:

ipchains -F
ipchains -P input ACCEPT
ipchains -P output ACCEPT
ipchains -P forward ACCEPT
ipchains -P forward -s 192.168.1.0/24 -j MASQ

and everything else (NAT, forwarding from an external address) is
working jsut fine.