iptables - sdileni samba problem

[Deimos182]

Zdravim ,
muj problem se tyka iptables a samby.
Mam ubuntu server jako branu do internetu .
eth0 - pripojen k internetu
eth1 - lokalni sit
zacnu prehravat ze serveru nebo kopirovat ze serveru . Po chvili se mi provoz zasekne a samba neodpovida , behem par vterin se rozbehne a vse zase funguje jak ma . A tak porad dokola
jakmile povolim povolim veskery provoz ( jinak dropuji) ve funguje jak ma . Sambu pouzivam v lokalni siti 192.168.88.0/24 na eth1

zde vypis firewallu:

Kód: [Vybrat]

# Generated by iptables-save v1.4.4 on Mon Mar 19 21:12:29 2012
*filter
:INPUT DROP
:FORWARD DROP
:OUTPUT DROP
-A INPUT -i eth1 -j ACCEPT
-A INPUT -i eth1 -p icmp -j ACCEPT
-A INPUT -p tcp -i eth0 --dport 22 -j ACCEPT
-A INPUT -p tcp -i eth0 --dport 80 -j ACCEPT 
-A INPUT -i eth0 -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A FORWARD -i eth1 -j ACCEPT
-A FORWARD -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -d 192.168.88.100/32 -i eth0 -p tcp -m tcp --dport 8291 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -s 192.168.88.0/24 -j ACCEPT
-A OUTPUT -o eth0 -j ACCEPT
-A OUTPUT -s 127.0.0.1 -j ACCEPT
COMMIT
# Completed on Mon Mar 19 21:12:29 2012
# Generated by iptables-save v1.4.4 on Mon Mar 19 21:12:29 2012
*nat
:PREROUTING ACCEPT
:POSTROUTING ACCEPT
:OUTPUT ACCEPT
-A PREROUTING -d 192.168.136.94 -p tcp -m tcp --dport 8291 -j DNAT --to-destination 192.168.88.100 
-A POSTROUTING -o eth0 -j SNAT --to-source 192.168.136.94
COMMIT
# Completed on Mon Mar 19 21:12:29 2012