[sebastan_bach]

hi rather than adding manual arp entries just add a route on the external device for the static public ip pointing to the external interface of the firewall.

cause i have faced issues in splat even though adding manual arp entries sometimes the firewall would not respond to arp request.but when u add a route it works like a charm

this is much easier.

regards

sebastan