Hi ! concerning access lists with nat ! is there any problem combining access-lists with PAT ? i configured PAT on the serial external interface and an outgoing access-list on the ethernet interface ( where our customer connects his equipement - using 192.168.4.x addresses ) - on static mapping for his exchange server ! outgoing packets are translated and send out but response packets are dropped - though i configured tcp established - could this be any problem, configuring the access-list after doing network address translation . ? : ip nat pool inside source list 1 interface serial 0/0:0 netmask 255.255.255.248 overload ip nat inside source static 192.168.4.2 x.x.x.100 access-list 1 permit 192.168.4.0 0.0.0.255 access-list 100 permit ip host 195.x.x.x.x host 192.168.4.2 access-list 100 permit ip host 195.x.x.x host 192.168.4.2 access-list 100 permit tcp any any established thanx in advance hans _________________________________ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]