Question : routing nightmare - new pix install replacing an old GnatBox

Ok...I am out of ideas here...maybe somone has seen this before.
New Pix install just 2 ethernet ports in use (Inside, Outside).
Using a full class C NAT Pool and I have verified that the last PAT address is not being used.  I am running about 200 outbound connections in the xlate.
DNS is working...
WWW is working - I can browse to this web site or any other and enter a question such as this
Outbound traffic on the surface seems good.
All Inbound is working as specified in my access-list/static mappings.

Problem1:  Some internal PC's can not telnet to a customer IP and some can.  
My PC ... I can ping the IP, but I cannot telnet to it
User on my lan...  can telnet and ping the IP.
Same subnet, same gateway, same DHCP serves both.
PIX SYSLOG:  for my connection it shows connection attempt going out...then times out
Verified that the customer is allowing our full class-c inbound

Problem2:  Some internal PC's can not telnet to a customer IP and some can...A little different issue though...
My PC..when a tracerout is run to the customer IP, it goes to stars before it shows my pix or external router...it is like it is dieing on the inside?
My User's PC---connects just fine.
This is a different customer site, but it has also been verified that they are allowing the full class-c subnet inbound.

This is by far one of the strangest problems that I have delt with.  The PIX seems to be working just fine...out of 20 or more customers that we telnet/vpn to, we are only having this problem with a couple of customers.  I would automatically asume that it is the customer side if it was not for the tracerout issue in Problem#2.

Any insight would be appreciated.  

Answer : routing nightmare - new pix install replacing an old GnatBox

you're sure the customer is allowing your entire class C net with the telnet port open?
Random Solutions  
 
programming4us programming4us