I have a PA-500. Our public block of IP addresses come in on Ethernet1/1 (Untrust Zone). I have no trouble NAT'ing in an outside IP to an internal device that is physically connected to a network on Ethernet1/2 (Trust Zone). Now, I created a "dmz" on Ethernet 1/4 and I gave the interface the address of 10.4.1.1. I put a client on this network and I am able to connect to the internet just fine. I installed Apache on the client to see if I could NAT in to a device on the DMZ and I it is not working for me. I don't know what I am missing... any help?
... View more