I have tried all day to configure a Windows 2k3 server to route packets from the external interface to the internal interface if they match a particular rule. This might be why it hasn't been working!