Пробросить порт на удаленку по RDP из внешки

iptables -t nat -A PREROUTING -p tcp -d <МОЙ IP СМОТРЯЩИЙ В ИНЕТ>--dport 3389 -j DNAT --to-destination 192.168.3.79:3389
iptables -A FORWARD -i eth1 -o vlan3 -d 192.168.3.79 -p tcp -m tcp --dport 3389 -j ACCEPT
iptables -A FORWARD -i vlan3 -o eth1 -s 192.168.3.79 -p tcp -m tcp --sport 3389 -j ACCEPT

[root@ldap ~]# iptables -L -v -n | grep 3389
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3389
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:3389
   64 26339 ACCEPT     tcp  --  eth1   vlan3   0.0.0.0/0            192.168.3.79        tcp dpt:3389
   67 26181 ACCEPT     tcp  --  vlan3  eth1    192.168.3.79         0.0.0.0/0           tcp spt:3389

176.192.17.52/30 dev eth1  proto kernel  scope link  src 176.192.17.54
192.168.7.0/24 via 192.168.2.47 dev vlan5
192.168.131.0/24 dev vlan1  proto kernel  scope link  src 192.168.131.100
10.101.38.0/24 via 192.168.2.47 dev vlan5
192.168.3.0/24 dev vlan3  proto kernel  scope link  src 192.168.3.77
192.168.2.0/24 dev vlan5  proto kernel  scope link  src 192.168.2.77
192.168.80.0/24 via 192.168.3.223 dev vlan3
192.168.1.0/24 dev vlan4  proto kernel  scope link  src 192.168.1.77
169.254.0.0/16 dev vlan5  scope link
default via 176.192.17.53 dev eth1

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc htb qlen 1000
    link/ether 00:07:e9:0e:a4:54 brd ff:ff:ff:ff:ff:ff
    inet 176.192.17.54/30 brd 176.192.17.55 scope global eth1
    inet6 fe80::207:e9ff:fe0e:a454/64 scope link
       valid_lft forever preferred_lft forever
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 70:71:bc:42:ee:ca brd ff:ff:ff:ff:ff:ff
    inet6 fe80::7271:bcff:fe42:eeca/64 scope link
       valid_lft forever preferred_lft forever
4: sit0: <NOARP> mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
5: vlan1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
    link/ether 70:71:bc:42:ee:ca brd ff:ff:ff:ff:ff:ff
    inet 192.168.131.100/24 brd 192.168.131.255 scope global vlan1
    inet6 fe80::7271:bcff:fe42:eeca/64 scope link
       valid_lft forever preferred_lft forever
6: vlan3@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc htb
    link/ether 70:71:bc:42:ee:ca brd ff:ff:ff:ff:ff:ff
    inet 192.168.3.77/24 brd 192.168.3.255 scope global vlan3
    inet6 fe80::7271:bcff:fe42:eeca/64 scope link
       valid_lft forever preferred_lft forever
7: vlan4@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc htb
    link/ether 70:71:bc:42:ee:ca brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.77/24 brd 192.168.1.255 scope global vlan4
    inet6 fe80::7271:bcff:fe42:eeca/64 scope link
       valid_lft forever preferred_lft forever
8: vlan5@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc htb
    link/ether 70:71:bc:42:ee:ca brd ff:ff:ff:ff:ff:ff
    inet 192.168.2.77/24 brd 192.168.2.255 scope global vlan5
    inet6 fe80::7271:bcff:fe42:eeca/64 scope link
       valid_lft forever preferred_lft forever
9: gre0: <NOARP> mtu 1476 qdisc noop
    link/gre 0.0.0.0 brd 0.0.0.0

iptables -A FORWARD -i eth1 -p tcp --dport 3389 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -d XXX.XXX.XXX.XXX  --dport 3389 -j DNAT --to-destination 192.168.2.100:3389