Hello all,
I have a few OpenBSD servers faithfully running NAT in various spots.
One of these firewalls is doing VERY simple NAT on an interface,

almost a cut and past from the PF pages (only really the IP addresses

got changed).
However, the client wants to be able to connect to an FTP server that

is using TLS.
My first thought of this was "you can't".  however, I was quickly

disabused of this idea by connecting to their server using the program

they use (FileZilla) within a Windows XP instance running inside

Parrallels through a Netlink ADSL modem.  That is two sets of

translation happening!
This got me confused as everything I have read about TLS says this

can't be done.  At least not with NAT.
So I am wondering if anyone has had any experience with this and can

point me in the right direction?
The only way I can think that the Netlink is doing it is by doing some

sort of Dynamic IP Address forwarding (setting up some rule that just

dumps all traffic directly...) but I don't know.
Regards
Mikel