NATing for a DMZ

[TalentedFool]

Hi All,

Me again! This was so much easier with 1 ISP and having it done on the firewall.

OK, - DMZ access question

My FTP, SMTP WEB etc are all nicely placed in my DMZ which is connected to my PIX. On the PIX I NAT the inside IP to outside worlds IP. Works great!

eg 10.200.1.2 to xxx.yyy.193.19 (ISP 1 public IP)

We're moving to a 2nd isp and so I have to in-time re-configure the router totally to just use the new ISP so I thought I'd just move my FTP server onto the new ISP as a test.

I now have to NAT for the FTP server on my router. How do I do this? so far I have

Firewall
--------
Nat of FTP server - 10.200.1.2 to 198.168.1.5 (Private IP)

Router
------

Lan IP 198.168.1.1
ip nat inside source static 198.168.1.5 aaa.bbb.7.230
ip nat outside destination static aaa.bbb.7.230 198.168.1.5


When I do an FTP to the server from the outside world - nothing happens! I've checked the access-list log and nothing is being denied.

am I nating correctly ?

~ Remember - Nothing is Fool Proof to a Talented Fool ~