My first suggestion would be to convince them to get a device that would give them an actual DMZ (i.e., Pix515) so that you are not passing traffic onto their internal network. Secondly, I would suggest translating the traffic coming in on port 44...
A simple test to perform would be to telnet from fred's PC to the IP address of the intermediate box "telnet x.x.x.x 25' if that allows you through this portion is good. Move to the next peice of the puzzle. As previously stated enter 'no fixup pr...