We're running openafs with kerberos5/aklog. I've got several machines behind a firewall box which does NAT for the internal network. kerberos and openafs work fine, I just can't get aklog to get my afs token when it's NAT'd. aklog works fine from the firewall machine. Any suggestions on how to get aklog to work in a NAT environment? Thanks, jp