On Sun, 12 Sep 2004 22:18:45 +0100, Andrew Greenwood
<lists at silverblade dot co dot uk> wrote:
> 
> However, accessing OPT1 from the LAN fails unless an outbound NAT rule is
> created specifically for it.
> 

You're missing a firewall rule.  You don't need NAT at all to go from
LAN -> OPT or vice versa, that's just routed according to the routing
table, as Fred mentioned.  If you put in a rule allowing LAN -> OPT1,
it should work.

-Chris