>If yes, can you show me how is the command look like? >>Hi, >>I guess you can config a static nat mapping >>and reverse the inside and outside interface. Mike, Try this instead, ip nat inside source static tcp 192.168.0.100 25 25 extendable This statement will allow mail to your rfc1918 addressed mail bridgehead server. With Cisco's implementation you can actually redirect ports to different output ports unlike most Linksys and Netgear cable/modem routers, have fun and secure your mail realy! The only difference from what you are asking is this is on a port by port basis, I am not familiar of a way to do full 1to1 NAT to virtual IP. Also I have not found any documentation supporting the ability to add "Conduit"(Pix, similar to ACL)statements or access-list's to these statics so use them at your own risk. HTH You can use a secondary address if you need "Virtual addresses" I beleive, I have tested with secondary's on the internal site but not the external. Ken Claussen MCSE CCNA CCA [EMAIL PROTECTED] "The Mind is a Terrible thing to Waste!" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=7050&t=7050 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

