[sebastan_bach]

hey great that thing worked.

even with static nat we can still have rules to reach the internal ip directly. but generally we do static nat for hiding our internal server;s ip address on the internet.

previously why it did;t work i guess cause u are using private addresses on the internal dmz servers.i guess on the outside router u are not having a route for internal addresses space pointing to the external interface of the gateway.

regards

sebastan