Ah. I needed an incoming rule. Gotcha. I figured that since it had to map the incoming packet back to the original NATted host that it would be implicit. After all, I don't have to havin incoming rules for other reply packets. Then again, TCP does open a VC, and I don't know if I'd have to do the same thing for UDP replies.

Regardless, it worked. Thanks muchly.