NAT not working on internal network

["`e k i p s" <spam_(_at_)_nalidge_(_dot_)_net>]

## REPOST ## 

Hello,
i have recently implemented NAT on my OpneBSD box to forward httpd requests 
on port 8080 to a box on an internal IP behind the OpenBSD box.  i have a 
fairly typical setup: 

[web server]10.0.0.4---->10.0.0.1[OpenBSD 2.8]aaa.bbb.ccc.238--->INTERNET 

my rc.conf & sysctl.conf are setup according to the documentation.  ipfw and 
ipnat start fine.  here is the redirect that i am using: 

rdr xl0 aaa.bbb.ccc.238/32 port 8080 -> 10.0.0.4 port 80 

# ipnat -l:
List of active MAP/Redirect filters:
map xl0 10.0.0.0/24  -> 24.221.170.238/32  portmap tcp/udp 10000:60000
map xl0 10.0.0.0/24  -> 24.221.170.238/32
rdr xl0 24.221.170.238/32 port 8080 -> 10.0.0.4 port 80 tcp 

List of active sessions: 

well, the problem is that outside connections are redirected without 
problem, but connections coming from within my network (10.0.0/24) are 
denied.  i have tried this with a completely open ipf.rules file (pass in 
from any to any/pass out from any to any) to no avail.  do i need to look 
into bimaps?  do i need to create an internal redirect (which i have 
unsuccessfully attempted)? 

thanx in advance for any and all help, 

)fjs( 

+---
|     francisco j. sanchez
    ekips_(_at_)_nalidge_(_dot_)_net           |
                             ---+