I know this post is older now, but great info, thanks! I had a static route on the upstream router for a /24 pointing to the ASA 'outside' interface for which I only had maybe a dozen 1:1 NATs set up on. For any IP without a NAT set up, it of course...