(no subject)

[g.tranelli]

I'm doing port forwarding (DNAT) to my internal machines (web, smtp, pop3).
Now I want to forward every packet going to my public ip interface with ip
address 1.2.3.4
to my dmz servers with ip addresses 192.168.1.0/24.
So the filtering rules for connections coming from the external are only
related to
the FORWARD chain because the filtering subsystem see the packets
with my DMZ ip addresses and go straight through the linux box, isn't it ???.
Right or wrong ???
Thank you for any suggestion.