Re: Use NAT to translate an external IP to an internal one? I did "service: any" with the tracert testing. That's why it died. Nice catch. :-) I'm thinking the replies should route back to the firewall because of Hide NAT. But that's not what appears to be happening. I was about to resort to fw monitor. The NTP server is on the same LAN/WAN as the clients. time.windows.com is only one of the many destinations, unfortunately. The Macs go somewhere else. The Zebra printers try to go to dozens of different NTP servers, etc. Thanks for your thoughts, Ray |