Здравствуйте!
у меня есть правила iptables:

#!/bin/sh

INET_IP="192.168.0.1"
INET_ETH="eth0"
INET_ROADCAST="192.168.0.215"

LAN_IP="192.168.1.1"
LAN_IP_RANGE="192.168.1.0/24"
LAN_ETH="eth1"

PPP_ETH="ppp0"
PPP_IP="`/sbin/ifconfig $PPP_ETH | grep 'inet addr' | awk '{print $2}' | sed -e 's/.*://'`"

LO_ETH="lo"
LO_IP="127.0.0.1"

echo "1" > /proc/sys/net/ipv4/ip_forward

iptables -F
iptables -X
iptables -F -t nat
iptables -X -t nat
iptables -F -t mangle
iptables -X -t mangle

iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

iptables -t mangle -N out_t
iptables -t mangle -N in_t

cat /usr/local/bin/users | while read Res; do
iptables -t mangle -A in_t -d $Res -j RETURN
iptables -t mangle -A out_t -s $Res -j RETURN
done

iptables -A INPUT -p tcp --sport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

iptables -A OUTPUT -p tcp --tcp-flags SYN,ACK SYN,ACK \
-m state --state NEW -j REJECT --reject-with tcp-reset
iptables -A OUTPUT -p tcp ! --syn -m state --state NEW -j DROP

iptables -A INPUT -p ALL -i $LO_ETH -s $LO_IP -j ACCEPT
iptables -A INPUT -p ALL -i $LO_ETH -s $LAN_IP -j ACCEPT
iptables -A INPUT -p ALL -i $LO_ETH -s $INET_IP -j ACCEPT

iptables -A OUTPUT -p ALL -s $LO_IP -j ACCEPT
iptables -A OUTPUT -p ALL -s $LAN_IP -j ACCEPT
iptables -A OUTPUT -p ALL -s $INET_IP -j ACCEPT
iptables -A OUTPUT -m state ! --state INVALID -j ACCEPT

iptables -t mangle -F trafinp > /dev/null 2>&1
if [ x$? != x0 ]; then
iptables -t mangle -N trafinp
iptables -t mangle -I FORWARD -i $PPP_ETH -j trafinp
fi

iptables -t mangle -F trafout > /dev/null 2>&1
if [ x$? != x0 ]; then
iptables -t mangle -N trafout
iptables -t mangle -I FORWARD -o $PPP_ETH -j trafout
fi

iptables -t mangle -A trafout -j out_t
iptables -t mangle -A trafout -j RETURN
iptables -t mangle -A trafinp -j in_t
iptables -t mangle -A trafinp -j RETURN

iptables -A FORWARD -p tcp -d 192.168.1.11 -j ACCEPT

iptables -A FORWARD -i $LAN_ETH -p tcp --dport 5190 -j ACCEPT
iptables -A FORWARD -i $LAN_ETH -p tcp --dport https -j ACCEPT
iptables -A FORWARD -i $LAN_ETH -p tcp --dport 80 -j ACCEPT
iptables -A FORWARD -i $LAN_ETH -p tcp --dport 8080 -j ACCEPT
iptables -A FORWARD -i $LAN_ETH -p tcp --dport 53 -j ACCEPT
iptables -A FORWARD -i $LAN_ETH -p udp --dport 53 -j ACCEPT
iptables -A FORWARD -i $LAN_ETH -p tcp --dport 20 -j ACCEPT
iptables -A FORWARD -i $LAN_ETH -p tcp --dport 21 -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -t nat -A POSTROUTING -o $PPP_ETH -j SNAT --to-source $PPP_IP

открыты только некоторые порты, почему цепляется скайп?
может я где-то ошибся в правилах или противоречие получил?
статистику проходящего трафика снимаю в таблице mangle, цепочке FORWARD.

<span class='smallblacktext'>[ Редактирование ]</span>