Privet rebyata, u menya vishel takoe neponyatniy problem mejdu pix i routerom.
u menya gateway Cisco router s 2 ISP (kotoriy smtp zaprosi posilaet na 1 , web zaprosi na 2 provayder),  i esho na Pixe gateway ukazano ethernet interfeys routera s
route outside 0.0.0.0 0.0.0.0  ipaddresrouter

Plus na eto u menya s 2 ogo Provaydera est static nat na Interfeys DMZ na Pixe.

Vse normal6no vse rabotaet, NO inogda bivaet on prosto na nekotori ip addresa ne otvechaet.

kopiruyu svoy config pojaluysta posmotrite na config mojet ya chtoto neto zdelal

######################################################
Router
######################################################

interface FastEthernet0/1
ip address 192.168.30.1 255.255.255.0
ip nat inside
ip policy route-map map100
duplex auto
speed auto
no cdp enable

interface FastEthernet0/2
ip address xx.yy.zz.15  255.255.255.252
ip nat outside
duplex auto
speed auto
no cdp enable

interface ATM0/2/0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
bridge-group 1
pvc 0/35
  encapsulation aal5snap

interface BVI1
ip address aa.qq.ww.10  255.255.255.248
ip nat outside

ip classless
ip route 0.0.0.0 0.0.0.0 aa.qq.ww.9
ip route 0.0.0.0 0.0.0.0 xx.yy.zz.14

ip nat pool isp1 aa.aa.aa.12 aa.aa.aa.12  netmask 255.255.255.248

ip nat inside source route-map map111 interface BVI1 overload
ip nat inside source route-map map112 pool isp1 overload
ip nat inside source static tcp 192.168.30.10  25 aa.aa.aa.12  25
ip nat inside source static tcp 192.168.30.10  80 aa.aa.aa.12  80

ip access-list extended isp1
permit tcp any any eq smtp

ip access-list extended isp2
  permit tcp any any eq ftp-data
permit tcp any any eq ftp
permit tcp any any eq www
permit tcp any any eq 443
permit udp any any eq domain
permit tcp any any eq domain

route-map map111 permit 10
match ip address isp2
set ip next-hop aa.qq.ww.9
!
route-map map100 permit 10
match ip address isp2
set ip next-hop aa.qq.ww.9
!
route-map map100 permit 20
match ip address isp1
set ip next-hop xx.yy.zz.15
!
route-map map112 permit 10
match ip address isp1
set ip next-hop xx.yy.zz.15

######################################################
end
######################################################

######################################################
PIX Version 7.0
######################################################

!

interface Ethernet0
nameif outside
security-level 0
ip address 192.168.30.2 255.255.255.0
!
interface Ethernet1
nameif inside
security-level 100
ip address 172.20.16.1  255.255.0.0
!
interface Ethernet2
nameif DMZ
security-level 50
ip address 192.168.10.1 255.255.255.0
!            
interface Ethernet3
shutdown
no nameif
no security-level
no ip address

object-group service ports2  tcp
port-object eq www
port-object eq https
port-object eq smtp

access-list 102 extended permit ip any any
access-list 102 extended permit esp any any
access-list 102 extended permit gre any any

pager lines 24
logging enable
logging asdm informational
mtu outside 1500
mtu inside 1500
mtu DMZ 1500
no failover  
asdm image flash:/asdm
no asdm history enable
arp timeout 14400

static (DMZ,outside) tcp 192.168.30.10 smtp 192.168.10.10 smtp netmask 255.255.255.255
static (DMZ,outside) tcp 192.168.30.10  www 192.168.10.10  www netmask 255.255.255.255

(everything is open)
access-group 102 in interface outside
access-group 102 in interface inside
access-group 102 out interface inside
access-group 102 in interface DMZ
access-group 102 out interface DMZ

route outside 0.0.0.0 0.0.0.0 192.168.30.1 1

!

timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute

!
class-map class_http
match port tcp eq https
class-map inspection_default
match default-inspection-traffic
!
!
policy-map global_policy
class inspection_default
  inspect esmtp
  inspect http
  inspect ftp
  inspect skinny
  inspect rsh
  inspect sqlnet
  inspect dns maximum-length 512
  inspect h323 h225
  inspect h323 ras
  inspect netbios
  inspect rtsp
  inspect sunrpc
  inspect tftp
  inspect sip
  inspect xdmcp
class class_http
  inspect http
!

######################################################
end
######################################################

Zarane sposibo