ipmasqadm bug in potato 2.2r3 - 2.2.18 - i386

["Andreas Beham" <andreas.beham@aon.at>]

Sorry I dont know the package that covers ipmasqadm.
But on my system i386 Potato 2.2r3 kernel 2.2.18 the localhost cant open any
internetconnections anymore when I have defined some portforwarding rules
(or is it just the large number that causes the bug I dont know).

Here is the script that generates the rules ($EXTIP is my external ip
address):
######### BEGIN ##########
 /usr/sbin/ipmasqadm portfw -f

# DirectPlay Ports
#
port=2300
while [ $port -le 2400 ]
  do
       /usr/sbin/ipmasqadm portfw -a -P tcp -L $EXTIP $port -R 10.0.1.50
$port
       /usr/sbin/ipmasqadm portfw -a -P udp -L $EXTIP $port -R 10.0.1.50
$port
       port=$((port+1))
  done

# Suddenstrike Ports
#
 port=28800
 while [ $port -le 28900 ]
  do
       /usr/sbin/ipmasqadm portfw -a -P tcp -L $EXTIP $port -R 10.0.1.50
$port
       /usr/sbin/ipmasqadm portfw -a -P udp -L $EXTIP $port -R 10.0.1.50
$port
       port=$((port+1))
  done

# DirectPlay
#
 /usr/sbin/ipmasqadm portfw -a -P tcp -L $EXTIP 47624 -R 10.0.1.50 47624

# Operation Flashpoint
#
 /usr/sbin/ipmasqadm portfw -a -P tcp -L $EXTIP 2234 -R 10.0.1.50 2234
 /usr/sbin/ipmasqadm portfw -a -P udp -L $EXTIP 2234 -R 10.0.1.50 2234
############### END ##############

As soon as I flush the rules the internet connection from the localhost is
working again. From the network I can access the internet all the time. It
seems as if only the localhost is affected.
When I have the rules on, the connection looks like the following (netstat):

tcp 0 1 N698P029.adsl.high:2353 www.google.com:www SYN_SENT

It hangs at exactly that point. In lynx this is displayed as the message:
"Making http connection to www.google.com" and then nothing.

Ah yes I should also mention that dnslookup works though. So I can make
nslookup www.google.com and get the right answer. (with the rules enabled).
Though I cant open any tcp connection be it ftp or www.

If you would be so kind to report back directly to me too as I am not
subscribed to the mailing list.

Thanks,
Andreas