From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <dd1email@gmail.com>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on sa.int.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.5 required=5.0 tests=BAYES_00, DNS_FROM_OPENWHOIS, 
	RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.2.5
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:date:from:to:subject:message-id
	:mail-followup-to:references:mime-version:content-type
	:content-disposition:content-transfer-encoding:in-reply-to;
	bh=7B0cIiMivhGlELmM/RSGraYrWpUsVJMH+C4HNU0P13w=;
	b=XXEUdyDAbwy40UFOM3hUEtmXAMTuGQZTVAJapJ8f3YPqG5SlqbTBT0Do/BpVDU//mI
	IDX8N7ofCys2T8rogfp63SKdtRk9td5ZlT/OhXT/TEnLFbpzGMRgi9go8Lj8zohTL5vp
	gp1jDuowMvRuCqEbTF9X2ixcQuREHzSzG58zg=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=date:from:to:subject:message-id:mail-followup-to:references
	:mime-version:content-type:content-disposition
	:content-transfer-encoding:in-reply-to;
	b=dERlXHdV8z4BzQoh9cir59Wf6x6O61GTwdQM2F24ym0v1cyvfitKnLnxRJrLMdC4Xo
	071bnmPzLUG9A2eP8B0zNxpI4Rjh/GSoTp2Vfr5100oqHRp9KiJbkm/8EU90dTJVzNbW
	sn9hUnMrqgLHn1Ezrz0rO3dOVDqANUQYa31FI=
Date: Tue, 17 May 2011 21:05:53 +0400
From: Dmitry Chistikov <dd1email@gmail.com>
To: ALT Linux Community general discussions <community@lists.altlinux.org>
Message-ID: <20110517170553.GA21320@conflux.foliandre>
Mail-Followup-To: ALT Linux Community general discussions
	<community@lists.altlinux.org>
References: <201105170949.42324.info-vcvitstst@tut.by>
	<201105171302.49568.info-vcvitstst@tut.by>
	<201105171421.27364.cas@altlinux.ru>
	<201105171332.02048.info-vcvitstst@tut.by>
MIME-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <201105171332.02048.info-vcvitstst@tut.by>
Subject: Re: [Comm] =?koi8-r?b?8M/Ey8zA3sXOycUgyyDpztTF0s7F1NU=?=
X-BeenThere: community@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: ALT Linux Community general discussions
	<community@lists.altlinux.org>
List-Id: ALT Linux Community general discussions <community.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/community>,
	<mailto:community-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/community>
List-Post: <mailto:community@lists.altlinux.org>
List-Help: <mailto:community-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Tue, 17 May 2011 17:04:45 -0000
Archived-At: <http://lore.altlinux.org/community/20110517170553.GA21320@conflux.foliandre/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

Олег Потеев, May. 17, 2011, 13:32 +0300:
> #iptables -L -t nat
> Chain 	PREROUTING 	(policy ACCEPT)
> target 	prot		opt 	source 	destination
> 
> Chain 	PREROUTING 	(policy ACCEPT)
> target 	prot		opt 	source 	destination
> MASQUERADE	all	-- anywhere	anywhere

MASQUERADE должен быть в POSTROUTING.

Откуда взялась вторая цепочка PREROUTING в таблице nat?

Ну и еще поглядите, что говорит
cat /proc/sys/net/ipv4/ip_forward

-- 
Дмитрий Чистиков