I'm NAT'ing it also. Should have put these in my first email I guess. $IPTB -A FORWARD -d 1.2.3.4 -p tcp --dport 3389 -j ACCEPT
$IPTB -t nat -A PREROUTING -d 1.2.3.4 -p tcp --dport 3389 -j DNAT --to 192.168.0.1 $IPTB -t nat -A POSTROUTING -s 192.168.0.1 -d ! 192.168.0.0/24 -j SNAT --to 1.2.3.4 Prerouting before forwarding? So I need to specify 192.168.0.1 as the destination in the forward rule?
