Okay, you're doing a bunch of stuff with which I am unfamiliar (especially that --state NEW,INVALID stuff), but there are a couple of things that I think could help you...
Please allow me to suggest that you both take a good look at Shorewall (http://www.shorewall.net) for this. If you read the quick-start guides and use the two-interface guide, or some other guide, you should be up and running on your first setup in under 15 minutes. Later on, you'll be able to setup a new system in under two minutes, and Shorewall is also very powerful (setup masquerading, tunnels, redirection, NAT, DNAT, SNAT, and a bunch of other stuff too).
-- Rodolfo J. Paiz [EMAIL PROTECTED]
-- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
