our pix is running nat, and i want to put an outlook web access server on a dmz interface. however, all the netbios communication to the domain controllers and exchange servers seems like it is going to require a whole lot of static/conduits and a serious lmhosts file. bottom line: is there a way to enable nat just for inside addresses going outside? it seems that nat is an all or nothing set up. i'd like to run nat just on the internet interface. thanks, gordon Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=19152&t=19152 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]