Like I said, the SNAT might work (you still need the correction recommended by Mario). The real answer is to have the lab on a different Astaro interface instead of in the LAN.

Cheers - Bob

__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!