nat模式，外网可以ping通vip，但是不能打开网页

环境是这样的
一台调度服务器
外网Ip：192.168.1.3
内网IP：10.0.1.3
vip:19.168.1.2
已经设置ip_forward
net.ipv4.ip_forward = 1

三台真正web
配置情况如下：
web1
10.0.1.0/24 dev eth1 proto kernel scope link src 10.0.1.228
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.228
169.254.0.0/16 dev eth0 scope link metric 1002
169.254.0.0/16 dev eth1 scope link metric 1003
default via 10.0.1.5 dev eth1

web2
10.0.1.0/24 dev eth1 proto kernel scope link src 10.0.1.227
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.227
169.254.0.0/16 dev eth0 scope link metric 1002
169.254.0.0/16 dev eth1 scope link metric 1003
default via 10.0.1.5 dev eth1

web3:
10.0.1.0/24 dev eth1 proto kernel scope link src 10.0.1.222
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.222
169.254.0.0/16 dev eth0 scope link metric 1002
169.254.0.0/16 dev eth1 scope link metric 1003
default via 10.0.1.5 dev eth1

lvs.cf配置是这样的：
serial_no = 50
primary = 192.168.1.3
primary_private = 10.0.1.3
service = lvs
backup = 0.0.0.0
heartbeat = 1
heartbeat_port = 539
keepalive = 6
deadtime = 18
network = nat
nat_router = 10.0.1.5 eth1:0
nat_nmask = 255.255.255.255
debug_level = NONE
virtual vnat {
active = 1
address = 192.168.1.2 eth0:1
vip_nmask = 255.255.255.255
port = 80
send = "GET / HTTP/1.0\r\n\r\n"
expect = "HTTP"
use_regex = 0
load_monitor = none
scheduler = wlc
protocol = tcp
timeout = 60
reentry = 15
quiesce_server = 0
server real1 {
address = 10.0.1.222
active = 1
port = 80
weight = 1
}
server real2 {
address = 10.0.1.227
active = 1
port = 80
weight = 1
}
server real3 {
address = 10.0.1.228
active = 1
port = 80
weight = 1
}
}
不知道为什么，能ping通192.168.1.2却无法打开网页
ipvsadm
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 192.168.1.2:http wlc
-> 10.0.1.222:http Masq 1 0 0
-> 10.0.1.227:http Masq 1 0 0
-> 10.0.1.228:http Masq 1 0 0
请大家帮忙参谋参谋，我的问题出在哪里