I would like to have my server (behind CSS) initiate connections to a database server with its private address. (database server is on my internal network, css is on my DMZ) I would also like the server to initiate connections to the Internet with the public VIP address. I have tried to configure source groups for this server and that works, but it NAT's all connections from the server. Is there a way to configure the source group to look at the destination address or destination port and only NAT connections that aren't destined for this particular address or port?
