On Mon, 24 Jan 2005 17:01:43 +0100, Alex Dyas
<alex dot dyas at psineteurope dot com> wrote:
> However, no matter what I try I cannot get ssh working from the Internet
> to any of the machines. Logging on M0n0wall shows that the traffic is
> accepted right to the machine, but blocked going back out. A tcpdump on
> the machine verifies that it does see the incoming traffic, and that it
> tries to reply.
Sounds like the return traffic is hitting NAT on the way out. Enable
advanced outbound NAT and it should route it back out rather than
trying to NAT it.