iptables -t nat -I REROUTING -p tcp -i eth0 --dport 80 -j DNAT --to 192.168.194.4
iptables -I FORWARD -i eth1 -p tcp -m tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
iptables -I FORWARD -o eth1 -p tcp -m tcp --dport 3389 -m state --state NEW,ESTABLISHED -j ACCEPT