Yes, the NATing is done one-to-one. We do have a load balancer, but I'm not 100% sure where it sits in the architecture. I think I'm probably running into the issue with the firewall answering for servers that aren't really listening as you've mentioned. I'll check into each of those. Thanks for the ideas.