darwin redirect_port

From

Alexander Titaev (2:5070/66)

To

All

Date

2006-11-28T11:23:48Z

Area

RU.UNIX.BSD

Salut all.
имеем
igatp1:~ root# uname -a
Darwin igatp1.irk.ru 8.7.0 Darwin Kernel Version 8.7.0: Fri May 26 15:20:53 PDT 2006; root:xnu-792.6.76.obj~1/RELEASE_PPC Power Macintosh powerpc

запускаю
/usr/sbin/natd -v -f /etc/nat/natd.conf.apple -redirect_port tcp 192.168.1.2:3389 3389  

вижу
In  [TCP]  [TCP] 195.206.40.177:58130 -> 195.206.52.146:3389 aliased to
           [TCP] 195.206.40.177:58130 -> 192.168.1.2:3389

в ответ тишина
запускаю 
igatp1:~ root# tcpdump -i en0 host 192.168.1.2
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on en0, link-type EN10MB (Ethernet), capture size 96 bytes
11:17:15.824758 IP 192.168.1.2.incp > broadcasthost.712: UDP, length: 36
11:17:30.823886 IP 192.168.1.2.4-tieropmgw > broadcasthost.712: UDP, length: 36

те искомых пакетов исходящих с внутреннего интерфейса нет

форвардинг включен.
что забыл?

-- 
Sanyo		mailto:tit@irk.ru

--- tin/1.8.2-20060425 ("Shillay") (UNIX) (FreeBSD/6.2-PRERELEASE (i386))
 * Origin: The_Bulls echo gate (2:5070/66)
SEEN-BY: 50/12 400/814 450/1024 463/68 464/36 465/213 550/5068 5000/0 20 26 27
SEEN-BY: 5000/61 94 104 116 130 170 5000 5002/76 5002 5004/75 1111 5005/14
SEEN-BY: 5009/14 5010/77 275 5011/13 5012/46 5013/21 5015/28 5019/31 5020/400
SEEN-BY: 5020/545 2238 2395 2871 4441 5021/29 5025/3 5027/12 5029/34 5030/1080
SEEN-BY: 5030/1957 5035/38 5045/7 5054/1 4 8 9 11 28 35 36 37 45 63 66 67 70
SEEN-BY: 5054/75 84 85 5055/177 5057/119 5059/9 5062/10 5063/3 5064/7 5070/27
SEEN-BY: 5070/66 113 251 315 848 5076/1 5077/70 5080/1003 5084/9 5085/13
SEEN-BY: 5090/1029 5095/20 5096/18 6001/10 6070/109 6090/1

PATH: 5070/66 5000/5000 5020/545 5054/1 37