Join Domian Through Firewall/NAT

I have a computer lab with a 2003 domain and a bunch of workstations behind
a firewall. I need to allow a computer outside of the firewall to join the
domain. The error message I get is below. I think the problem is NAT
related. The server's ip address is 192.168.168.10, and I have one-to-one
NAT configured on the firewall so that 192.168.168.10 maps to 10.160.10.10.
I have the DNS on the outside workstation pointed to 10.160.10.10. It
identifies the dc, but can't connect for some reason.

Any ideas? Thanks.

---
DNS was successfully queried for the service location (SRV) resource record
used to locate a domain controller for domain domain.local:

The query was for the SRV record for _ldap._tcp.dc._msdcs.domain.local

The following domain controllers were identified by the query:

server.domain.local

Common causes of this error include:

- Host (A) records that map the name of the domain controller to its IP
addresses are missing or contain incorrect addresses.

- Domain controllers registered in DNS are not connected to the network or
are not running.

For information about correcting this problem, click Help.
---

Hi Todd,

I would first make sure you have the required ports open for connecting
thru the firewall. Here are a list of ports that are normally used:

179442.KB.EN-US How to Configure a Firewall for Domains and Trusts
http://support.microsoft.com/default...B;EN-US;179442


832017.KB.EN-US Port Requirements for the Microsoft Windows Server System
http://support.microsoft.com/default...B;EN-US;832017

Thank you,
Matthew Fresoli
Microsoft Network Support
--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.