[adrianw]

to update post with how this was fixed: had arp issue on Trusted FW could see Synch Ack on DMZ but only Synch so on DMZ fw made manual entry on arp table (created /etc/proxy-arp, pulls from rc.local so on reboot survives) to point to MAC address that Trusted FW has interface in. ran netstat -rn got IP address to go to perm and all is working now.