That does not make sense, no. There is no overlap between the two (you don't have a destination port in the first rule for 192.168.1.133, so the port will stay the same (3133)). In fact 'rdr pass' is a shortcut for an additional pass in rule. It looks like the outside world is connecting straight to 192.168.1.133:3389 without any redirection. Then again, I don't know how you network is set up (router, bridge, nat, interfaces, etc.)
|