I think I've figured it out. Packets coming in through the CISCO router are
not being specifically pointed at the firewall machine... I'm not sure whether
the CISCO broadcasts initially and then builds up a table of routes as machines
answer or what, but I'm guessing what I want to do is either tell the NetBSD
box to accept all traffic it's not broadcasting itself as being destined for
it, or, more likely, tell the CISCO box to direct all traffic at the NetBSD
box.

I don't know enough about CISCOs, so I'll try to find a book this weekend. If
anyone has any clues in the meantime, I'd be grateful for them. I'll look for
online resources later this evening.

Thanks in advance!

-- 
   Mason Loring Bliss   mason@acheron.middleboro.ma.us              E w i g e
awake ? sleep : dream;  http://acheron.ne.mediaone.net  B l u m e n k r a f t