Добрый день.
Не получается пробросить порт.
# iptables -nvL
Chain INPUT (policy ACCEPT 3640 packets, 289K bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 44782 packets, 24M bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 2631 packets, 257K bytes)
pkts bytes target prot opt in out source destination
# iptables -nvL -t nat
Chain PREROUTING (policy ACCEPT 3057 packets, 232K bytes)
pkts bytes target prot opt in out source destination
1 52 DNAT tcp -- * * 0.0.0.0/0 192.168.3.10 tcp dpt:1488 to:192.168.3.25:22
15 796 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4424 to:192.168.3.188:3389
10 520 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1488 to:192.168.3.25:22
Chain POSTROUTING (policy ACCEPT 415 packets, 23390 bytes)
pkts bytes target prot opt in out source destination
104K 8101K MASQUERADE all -- * eth1 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 387 packets, 20726 bytes)
pkts bytes target prot opt in out source destination
На машине, на которую пробрасывается порт, все правила в ACCEPT.