W2k Kerberos Secure Channel & Firewall

[Tom <tom () bonzi com>]

Does anyone have a idea howto/where to find info on setting up a W2k
Kerberos trusted domain through a PIX firewall. One of the Domain
Controllers is statically NAT'd and the other is publicly routable. Kerberos
it appears is not allowing a secure channel to be created (because of the
NAT I think) is there a way  to modify the Kerberos address info as it
traverses the firewall?

Any ideas/urls/thoughts/resources would be appreciated.

Thanks

Tom

ps: they are both seperate Active Directory Domains.