reedone816 0 Light Poster

hi, i'm a newbie in linux,
i would like to ask you guy about setting up the iptables,
when i just have one webserver and one mailserver, the routing is ok,
but when i add one webserver (so it makes two), all my webservers are not working, but the mailserverver is working.
here is my connection route:

extrernal link -->pc gateway (linux red hat enterprise 5.1)--> mailserver (windows)
|------------------------------------------> webserver B(IIS windows)
|------------------------------------------> webserver A(IIS windows)

here is my ipt:

# Generated by iptables-save v1.2.7a on Sun Jul 31 18:20:27 2005
*mangle
:PREROUTING ACCEPT [39873:18632263]
:INPUT ACCEPT [1076:116736]
:FORWARD ACCEPT [38322:18474437]
:OUTPUT ACCEPT [212:24684]
:POSTROUTING ACCEPT [38519:18497951]
COMMIT
# Completed on Sun Jul 31 18:20:27 2005
# Generated by iptables-save v1.2.7a on Sun Jul 31 18:20:27 2005
*nat
:PREROUTING ACCEPT [1975:169931]
:POSTROUTING ACCEPT [69:4036]
:OUTPUT ACCEPT [15:1260]
-A PREROUTING -d 202.X.X.A -i eth0 -p tcp -m tcp --dport 25 -j DNAT --to-destination 192.168.X.A:25 
-A PREROUTING -d 202.X.X.B -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.X.B:80
-A PREROUTING -d 202.X.X.C -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.X.C:80
-A PREROUTING -d 202.X.X.A -i eth0 -p tcp -m tcp --dport 110 -j DNAT --to-destination 192.168.X.A:110 
-A PREROUTING -s 192.168.0.0/255.255.0.0 -d 202.X.X.A -i eth1 -p tcp -m tcp --dport 25 -j DNAT --to-destination 192.168.X.A:25 
-A PREROUTING -s 192.168.0.0/255.255.0.0 -d 202.X.X.A -i eth1 -p tcp -m tcp --dport 110 -j DNAT --to-destination 192.168.X.A:110 
-A PREROUTING -s 192.168.0.0/255.255.0.0 -d 202.X.X.B -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.X.B:80 
-A PREROUTING -s 192.168.0.0/255.255.0.0 -d 202.X.X.C -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.X.C:80
-A POSTROUTING -s 192.168.0.0/255.255.0.0 -d 192.168.X.A -o eth1 -j SNAT --to-source 192.168.1.1 
-A POSTROUTING -s 192.168.X.A -o eth0 -p tcp -m tcp --sport 110 -j SNAT --to-source 202.X.X.A 
-A POSTROUTING -s 192.168.X.A -o eth0 -p tcp -m tcp --sport 25 -j SNAT --to-source 202.X.X.A 
-A POSTROUTING -s 192.168.0.0/255.255.0.0 -o eth0 -j SNAT --to-source 202.X.X.D
-A POSTROUTING -s 192.168.0.0/255.255.0.0 -d 192.168.1.1 -o eth0 -j SNAT --to-source 192.168.1.1
-A POSTROUTING -s 192.168.X.B -o eth0 -p tcp -m tcp --sport 80 -j SNAT --to-source 202.X.X.B
-A POSTROUTING -s 192.168.X.C -o eth0 -p tcp -m tcp --sport 80 -j SNAT --to-source 202.X.X.C
COMMIT
# Completed on Sun Jul 31 18:20:27 2005
# Generated by iptables-save v1.2.7a on Sun Jul 31 18:20:27 2005
*filter
:INPUT ACCEPT [1076:116736]
:FORWARD ACCEPT [21976:15208531]
:OUTPUT ACCEPT [212:24684]
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j DROP 
-A INPUT -i eth0 -p tcp -m tcp --dport 111 -j DROP
-A FORWARD -p tcp -m tcp --dport 80 -j ACCEPT
-A FORWARD -p tcp -m tcp --sport 80 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 135:139 -j DROP 
-A FORWARD -p tcp -m tcp --sport 135:139 -j DROP 
-A FORWARD -p tcp -m tcp --sport 445 -j DROP 
-A FORWARD -p tcp -m tcp --dport 445 -j DROP 
-A FORWARD -p udp -m udp --dport 445 -j DROP 
-A FORWARD -p udp -m udp --sport 445 -j DROP 
-A FORWARD -p udp -m udp --dport 135:139 -j DROP 
-A FORWARD -p udp -m udp --sport 135:139 -j DROP 
-A FORWARD -p udp -m udp --dport 53 -j ACCEPT 
-A FORWARD -p udp -m udp --sport 53 -j ACCEPT 
-A FORWARD -p udp -m udp -j DROP 
-A FORWARD -s 192.168.0.0/255.255.0.0 -i eth1 -j ACCEPT
-A FORWARD -i eth1 -j DROP 
COMMIT
# Completed on Sun Jul 31 18:20:27 2005

so can you help me on this one? which line(s) is(are) not right?

thanks....