Aargh, I'm really sorry to reply to myself twice. But I promise I'm done now ;-).
I found the post linked to below on deja.com which explains it all. Basically REDIRECT is only for forwarding between ports on the _local_ machine. You need ipmasqadm to forward to another machine. The post: http://x42.deja.com/getdoc.xp?AN=548096449&search=thread&CONTEXT=943065968.1817182317&HIT_CONTEXT=943065968.1817182317&hitnum=3 Chris Schleifer