Pessoal não consigo navegar de jeito maneira com as seguintes regras no meu firewall, vcs poderiam verificar onde eu estou errando, pq eu não acho nada errado vlw !!!
#Ativando Nat
modprobe iptable_nat
modprobe ip_nat_ftp
modprobe ip_conntrack_ftp
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
echo 1 > /proc/sys/net/ipv4/ip_forward
#Rota redes
ip route add 192.168.2.0/24 via 192.168.1.251
ip route add 192.168.3.0/24 via 192.168.1.49
#Setup default policy
for i in INPUT FORWARD OUTPUT; do iptables -P $i DROP; done
#loopback
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
#Ports INPUT Free
#SSH
iptables -A INPUT -p tcp --dport 2222 -j ACCEPT
#WEB
for i in 1 2 3; do iptables -A INPUT -p tcp -s 192.168.$i.0/24 --dport 80 -j ACCEPT; done
iptables -A OUTPUT -p tcp -m multiport --dports 80,443 -j ACCEPT
#FTP
iptables -A INPUT -p tcp --dport 20:21 -j ACCEPT
iptables -A INPUT -p tcp --dport 60000:61000 -j ACCEPT
#DNS
for i in tcp udp; do iptables -A INPUT -p $i --dport 53 -j ACCEPT; done
for i in tcp udp; do iptables -A OUTPUT -p $i --dport 53 -j ACCEPT; done
#for i in tcp udp; do iptables -A FORWARD -p $i --dport 53 -j ACCEPT; done
#SAMBA
for i in 1 2 3; do iptables -A INPUT -p udp -s 192.168.$i.0/24 --dport 137 -j ACCEPT; done
for i in 1 2 3; do iptables -A INPUT -p udp -s 192.168.$i.0/24 --dport 138 -j ACCEPT; done
for i in 1 2 3; do iptables -A INPUT -p tcp -s 192.168.$i.0/24 --dport 139 -j ACCEPT; done
for i in 1 2 3; do iptables -A INPUT -p tcp -s 192.168.$i.0/24 --dport 445 -j ACCEPT; done
#NFS
for i in tcp udp; do iptables -A INPUT -p $i -s 192.168.1.252 --dport 2049 -j ACCEPT; done
#LAN FREE
#iptables -A OUTPUT -p tcp -s 192.168.1.0/24 -j ACCEPT
#iptables -A OUTPUT -p udp -s 192.168.1.0/24 -j ACCEPT
#ICMP
iptables -A INPUT -p icmp -j ACCEPT
iptables -A OUTPUT -p icmp -j ACCEPT
#STATE RETURN
for i in INPUT FORWARD OUTPUT; do iptables -A $i -m state --state ESTABLISHED,RELATED -j ACCEPT; done