Jonathan,

Thanks for the info.  It looks like I have everything set up the way you 
describe.  The only reason for me to be using the 1:1 is for the /27 
addresses to be seen by the Internet - instead of the Internet seeing 
traffic as coming from my WAN address it sees traffic coming from the /27 
block.

Thanks again Chris and Jonathan for your help.


Aaron