thanks for the suggestion
made that change, but still the same result. the weird thing is that snat rule doenst increment the count, either before or after that change. maybe it only increments on tcp and not udp? not sure. but if it is supposed to increment on udp, then the lack of increment says something else is going on here.
looking at the scanned server list a bit closer (using a program that connects to each server, external and internal, via udp) it appears that when i view the internal servers, i get the correct list.
but when i view the external servers, it gives me a list combining external with internal. so something is still wrong here.
just not sure why the rule count doesnt increment. perhaps there is something else set up incorrectly?