Thanks for the info. It looks like I have everything set up the way you
describe. The only reason for me to be using the 1:1 is for the /27
addresses to be seen by the Internet - instead of the Internet seeing
traffic as coming from my WAN address it sees traffic coming from the /27
Thanks again Chris and Jonathan for your help.