Am I too dull for NAT ?!??

[Stefan Sonnenberg-Carstens]

I have a OpenBSD 3.2 firewall here, wich has an external interface rl0, with a routable IP Adress asigned, and an internal interface xl1, with a private IP assigned. On the internal side is a private network with some servers, 192.168.0.3 – 192.168.0.10, and I have corresponding routable IP’s from my provider. Now I’d like to do binat, to have a one-to-one relationship between these addresses. But if add a rule like : Binat on rl0 from any to 192.168.0.3 -> xx.yy.zz.aa, it does not work. Ip forwarding is enabled, as PF is.   What is wrong ?