I have a PIX 501. Both interfaces use public IP addresses, there is no NAT used anywhere. I'd like to allow the machines behind the PIX (two in a DMZ, one Windows, one Linux) to use traceroute to ...