-RULE="Dnat service dns from world.inet to dns.vservers.internal options comment=\"dns to dns\""
-RULE="Accept service dns from world.inet to firewall options in_int=\"vserver-dns-nic\""
-RULE="Dnat service imaps from world.inet to mail.vservers.internal options comment=\"imaps to mail\""
+RULE="Dnat service dns from world.inet to dns.vservers.internal options in_int=\"inet-nic\",remoteport=\"54\",comment=\"dns to dns (running on port 54)\""
+RULE="Accept service dns-internal from world.inet to firewall options in_int=\"vserver-dns-nic\""
+RULE="Dnat service imaps from world.inet to mail.vservers.internal options in_int=\"inet-nic\",comment=\"imaps to mail\""