Access to Xserve outside LAN

I have an Xserve running 10.6 Server. I have both SSH and Apache servers running. It was given an IP in the 10.1.1.x subnet and our router makes it accessible at a public IP on ports 22 and 80.

The problem is, we can only get to the machine from outside when the firewall is set to bidirectional NAT (meaning, the requests then appear to come from the LAN side IP of the router, instead of their actual origin).

Is there something I have to adjust in OS X Server to allow it to receive requests from outside its subnet? The built-in firewall security is off.

For the most part, this machine has a very basic, default configuration at this time.

thanks!
Patrick

figured it out! As usual, it turned out to be a routing issue separate from the server hardware.