IPCHAINS/ipmasqadm

[Yaron <jethro@freakzilla.com>]

  Hi,

Oh, I've finally moved my firewall/NAT to a seperate box than my
desktop. My network looks like this now:

                                  | [mail 192.168.0.1]
 206.147.x.x   192.168.0.100      | [www 192.168.0.10]
-DSL--[Firewall]------[Switch]----| [workstation a 192.168.0.20]
                                  | [workstation b 192.168.0.21]

Now, the NAT thinggie is port-forwarding stuff over to the internal
network. For example, www.yaron.org is DNSed as 206.147.x.x. The firewall
forwards port 80 to the internal 192.168.0.10.

This all works fine, except from th internal network. The firewall does
NOT redirect stuff coming in from the internal net.

I've got a couple of workarounds - /etc/hosts or hosts.txt files on the
workstations, or setting up an alternate DNS for the internal network, but 
I'd like to have the firewall do it's thing.

I'm using ipchains 1.3.9 and ipmasqadm 0.4.2, on kernel 2.2.16. IPCHAINS
is ACCEPTing the packets from the internal net, but then they vanish. 

Here's the IPCHAINS rule:
ACCEPT     tcp  ----l-  anywhere             beldaren.yaron.org    any -> www

And ipmasqadm:
TCP  beldaren.yaron.org   dragon.yaron.org          www      www     3 10


Anyone?


-Yaron

--