HELP - SuSEfirewall2 opensuse 11.2

Sorry for my English.
I have a dsl connection with public IP and I have also a machine witch has 4 nic. This machine direct connected with adsl modem.
I make a router from opensuse 11.2 (masquerade, plus squid for proxy function). This work good. I use with my laptop.
I make a web server (also opensuse 11.2 with apache) behind the opensuse router in a virtualbox.
In LAN (with private ip -172.y.y.y- with has the web server) I can reach the web page from apache, but if I call with public IP the result is: Connection to xx.xx.xx.xx Failed (111) Connection refused (xx.xx.xx.xx is my public ip address)
I set it in the susefirewall2:
fw_dev_ext=“any br0 dsl0 eth3”
fw_dev_int=“eth0 eth1 eth2”
fw_route=“yes”
fw_masquerade=“yes”
fw_forward_masq=“0/0,172.y.y.y,tcp,80”
fw_masq_dev=“zone:ext”
fw_masq_net=“0/0”
fw_services_ext_tcp=“http”

What am I doing wrong?
What can I do? >:(