That does sound like it is NATing the OPT interfaces. So, the question is, what do you have for outbound NAT rules? -Bryan