Помогите с настройкой Шлюза

root@mars:~# cat /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
pre-up echo "1" > /proc/sys/net/ipv4/ip_forward  # Включаем форвардинг пакетов
pre-up iptables-restore < /etc/ip_rulles.lst     # Загружаем правила
post-down iptables-save > /etc/ip_rulles.lst     # Сохраняем правила
# The primary network interface
# eth0 - интерфейс wan
# allow-hotplug eth0
auto eth0
iface eth0 inet static
address 192.168.0.211
netmask 255.255.255.0
gateway 192.168.0.25
# eth1 - интерфейс LAN
# allow-hotplug eth1
auto eth1
iface eth1 inet static
address 192.168.0.212
netmask 255.255.255.0
broadcast 192.168.0.211

eth0      Link encap:Ethernet  HWaddr 00:14:85:0a:d0:d8
          inet addr:192.168.0.211  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::214:85ff:fe0a:d0d8/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:14678 errors:0 dropped:0 overruns:0 frame:0
          TX packets:10990 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1353527 (1.2 MiB)  TX bytes:1029883 (1005.7 KiB)
eth1      Link encap:Ethernet  HWaddr 00:e0:53:12:47:0d
          inet addr:192.168.0.212  Bcast:192.168.0.211  Mask:255.255.255.0
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:170 errors:2 dropped:142 overruns:2 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:10836 (10.5 KiB)  TX bytes:0 (0.0 B)
          Interrupt:21 Base address:0xa000
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:52 errors:0 dropped:0 overruns:0 frame:0
          TX packets:52 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:4410 (4.3 KiB)  TX bytes:4410 (4.3 KiB)
tap0      Link encap:Ethernet  HWaddr 92:8d:3c:17:2b:47
          inet addr:10.10.1.1  Bcast:10.10.1.255  Mask:255.255.255.0
          inet6 addr: fe80::908d:3cff:fe17:2b47/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:468 (468.0 B)
tap1      Link encap:Ethernet  HWaddr ba:eb:09:e3:a0:3c
          inet addr:10.8.1.8  Bcast:10.8.1.255  Mask:255.255.255.0
          inet6 addr: fe80::b8eb:9ff:fee3:a03c/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:6 errors:0 dropped:0 overruns:0 frame:0
          TX packets:23 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:420 (420.0 B)  TX bytes:1350 (1.3 KiB)

 Generated by iptables-save v1.4.8 on Mon Jun 10 22:29:07 2013
*filter
:INPUT DROP [104:12852]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth1 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -m state --state INVALID -j DROP
-A INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 1194:1195 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --dport 1194:1195 -j ACCEPT
-A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -m state --state INVALID -j DROP
-A FORWARD -i eth1 -o eth0 -j ACCEPT
-A FORWARD -i eth0 -o eth1 -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o eth1 -j ACCEPT
-A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
COMMIT
# Completed on Mon Jun 10 22:29:07 2013
# Generated by iptables-save v1.4.8 on Mon Jun 10 22:29:07 2013
*nat
:PREROUTING ACCEPT [104:12852]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [22:1131]
-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Mon Jun 10 22:29:07 2013
# Generated by iptables-save v1.4.8 on Mon Jun 10 22:29:07 2013
*mangle
:PREROUTING ACCEPT [2843:257591]
:INPUT ACCEPT [2843:257591]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2441:253156]
:POSTROUTING ACCEPT [2441:253156]
COMMIT
# Completed on Mon Jun 10 22:29:07 2013