[NTLUG:Discuss] Port forwarding with IPCop

[Bobby Wrenn]

I am have trouble with my new DMZ setup.

My old network looked like this

  WORLD
    |
Firewall (running Apache and Postfix)
    |
Internal LAN

Local (Internal LAN) clients were collecting mail from Firewall with 
POP3 clients.

Old network was running ipchains and it has been static for at least 4 
years. Translation "I can't remember how I did it."

New network looks like this

         WORLD
           |
        Firewall machine with 3 NICs running IPCop Static IP
           |
      _____|_________
     |               |
Internal LAN        |
192.168.1.0/24    Servers (Apache and Postfix)
                   192.168.2.0/24

On the firewall I have the following set up for forwarding.

TCP DEFAULT IP : 25(SMTP) > 192.168.2.2 : 25(SMTP)
TCP DEFAULT IP : 110(POP3) > 192.168.2.2 : 110(POP3)
TCP DEFAULT IP : 80(HTTP) > 192.168.2.2 : 80(HTTP)

I think these are correct. However, I can't retrieve mail from Servers 
on Internal LAN. The error indicates "Connection refused".

I'm sure I'm missing something simple. But it's been a few years since I 
have tried to mess with this. What am I missing?

TIA
Bobby