I can see that on ETH04 you have 2 IPs aliased, one public and one private. Also on interface ETH03 you have a private address. Right so far? I suppose your wan is ETH04 and ETH03 is the lan. What is the role of ETH04:00?
Secondly I see that you are MASQUERADING on both ETH03 and ETH04, which looks wrong. Please clarify these questions and we’ll see how we will move on.