I do appreciate the response. luckily I had the clients in a range from 1-128 and the server was above that so I just sub-netted the Mail server so that his “local network” didn’t include the router. this fixed it for this client but having the masquerade turned off for incoming packets would be good.