Quoting Andy Zbikowski (Zibby) (zibby at ringworld.org):
> I've been experimenting with getting a linux mail server (on a public IP)
> to talk to a Kerberos realm (behind the firewall on a private IP) using
> some iptables NAT tricks. So far I haven't had much success.

Since NAT messes with the packet, I pretty sure kerberos is not going to like
it.
-- 
Bob Tanner <tanner at real-time.com>       | Phone : (952)943-8700
http://www.mn-linux.org                 | Fax   : (952)943-8500
Key fingerprint =  6C E9 51 4F D5 3E 4C 66 62 A9 10 E5 35 85 39 D9