I'm having trouble blocking ports on my ISA server... I try to block for example Netbios and still when I scan the IP from outside it does respond to the ports that i have just blocked....
Another thought. Did you accidently include your external address in the LAT?
Dar Scott