Using a pix501, have servers on the outside interface that need to be able to access servers on the inside interface. I can ping from the inside out, but when attempting to ping from the outside in, getting a 305005: No translation group found for icmp src server2 dst inside:server1 (type 8, code0) message in the log. The inside network is 10.100.3.x and the outside is 10.25.143.x. I would really just like the pix to function more like a router with an acl in this situation since I need each side to see the real IP address of the other server. The translation rule nat (inside) 0 10.0.0.0 255.0.0.0 0 0 is working to allow traffic inside out, but any other rules I try adding result in a configuration error.