I essentially have everything go out as a global nat, but every now and then a tcpdump on the frontside interface is showing some ICMP and UDP packets not getting natted. Anyone ever seen this before? It's not a major deal as we are are having our front edge router handle these ugly packets, but I'd like to tighten it up. Thanks! -Dan
