USE FWBUILDER!!!!!
[link|http://www.fwbuilder.org|http://www.fwbuilder.org]
It is what I use for my FW administration and port redirection.
Things are vera nice.
I'll bet that your outgoing spoofing protection is denying the packets to get through. Since the ping of .4.1 of X cannot get back to 0.1 it seems logical.
I could send you a stripped version of my .xml file for fwbuilder...
So you understand fwbuilder's operation. It is tough sometimes.
One last thing you are going to want to update the IPTABLES to at least v1.2.8a. Anything before it has some serious rule parsing issues.
--
[link|mailto:greg@gregfolkert.net|greg],
[link|http://www.iwethey.org/ed_curry|REMEMBER ED CURRY!] @ iwethey
Give a man a match, he'll be warm for a minute.
Set him on fire, he'll be warm for the rest of his life!