Todd, Try pinging/tracing with the correct source adress, ping 74.125.45.100 source fa 0/0 that would originate packets with the public source adress on that interface instead of the RFC1918 ip you're using at the moment. (default is to use the IP adress on the interface the packet leaves) Regards, Erik Versaevel Erik Versaevel