Instead of all the iptables BS, just use redir for the most common port forwarding case. It works.