I've got the same problem with the Tiny and the NAT built into win2k RRAS. Tiny just doesn't get along with that kind of thing I guess, which I suppose is understandable, it's not really designed for...