请帮忙看看我的配置，有什么错误的地方或遗漏了地方

xinlinux

我的配置了，代理服务器可以上网，内网中的机子可以PING通服务器，但是不能通过它上网。配置如下：（请帮忙看以下有什么错误的地方或遗漏的地方）谢谢！
..../ifcfg-eth0
DEVICE=eth0
BOOTPROTO=none
BROADCAST=10.11.11.255
IPADDR=10.11.11.2
NETMASK=255.255.255.0
NETWORK=10.11.11.0
HWADDR=00:50:ba:69:95:12
ONBOOT=yes
USERCTL=no
PEERDNS=no
TYPE=Ethernet
..../ifcfg-eth1
# Please read /usr/share/doc/initscripts-*/sysconfig.txt
# for the documentation of these parameters.
USERCTL=no
PEERDNS=no
TYPE=Ethernet
DEVICE=eth1
HWADDR=00:50:ba:69:8e:69
BOOTPROTO=none
NETMASK=255.255.255.192
ONBOOT=yes
IPADDR=21.238.162.131
NETWORK=21.238.162.128
BROADCAST=21.238.162.191
GATEWAY=21.238.262.129
.../iptables
# Firewall configuration written by lokkit
# Manual customization of this file is not recommended.
# Note: ifup-post will punch the current nameservers through the
#       firewall; such entries will *not* be listed here.
*filter
:INPUT ACCEPT [0]
:FORWARD ACCEPT [0]
:OUTPUT ACCEPT [0]
:RH-Lokkit-0-50-INPUT - [0]
-A forward -d 202.106.127.1 -j MASQ        外部DNS解析
-A forward -s 10.11.11.0/24 -j MASQ        内部IP
-A forward -d 21.238.162.129 -j MASQ      外部网关
[0] -A POSTROUTING -s 10.11.11.3 -j MASQUERADE
COMMIT
.../network
NETWORKING=yes
HOSTNAME=ljq
NETWORKING=yes
FORWARD_IPV4="yes"
GATEWAYDEV="eth1"
.../resolv.conf
nameserver 202.106.127.1
nameserver 202.106.196.115
.../sysctl.conf
# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled.  See sysctl( and
# sysctl.conf(5) for more details.

# Controls IP packet forwarding
net.ipv4.ip_forward = 1

# Controls source route verification
net.ipv4.conf.default.rp_filter = 1

# Controls the System Request debugging functionality of the kernel
kernel.sysrq = 1

# Controls whether core dumps will append the PID to the core filename.
# Useful for debugging multi-threaded applications.
kernel.core_uses_pid = 1
..../squid.conf中加了acl all src 10.11.0.0/255.255.255.0