подскажите, проблема такая:
есть статический нат. сделан на циске 2801. Он отделяет сеть предприятия от сети отдела. но днс предприятия по nslookup выдает не внешние ip адреса (предприятия) а адреса из-за ната... что не есть правильно. как победить сию проблему не знаю, всю голову уже сломал :о(
для других подсетей есть 2 доп влана, маршрутизируются по ospf, они не относятся к этой проблеме

конфиг 2801:
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service compress-config
!
hostname 2801
!
boot-start-marker
boot system flash c2801-advipservicesk9-mz.124-2.T1.bin
boot system flash c2801-ipbase-mz.124-1c.bin
boot-end-marker
!
enable password ххх
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
no ip dhcp use vrf connected
!
no ip ips deny-action ips-interface
!
interface Loopback1
no ip address
!
interface Loopback255
description -- ID router for OSPF
ip address 192.167.0.1 255.255.255.255
!
interface FastEthernet0/0
description trunk port for vlan (inside area)
no ip address
ip accounting output-packets
ip accounting access-violations
ip route-cache flow
duplex auto
speed auto
!
interface FastEthernet0/0.1
description port  for vlan 101 otdel 1 (inside area)
encapsulation dot1Q 101
ip address 172.18.130.16 255.255.0.0
ip verify unicast reverse-path
no ip redirects
ip accounting output-packets
ip accounting access-violations
ip nat inside
ip virtual-reassembly
no snmp trap link-status
!
interface FastEthernet0/0.2
description port  for vlan 102 LAN
encapsulation dot1Q 102
ip address 3.77.0.1 255.255.255.0
ip verify unicast reverse-path
ip accounting output-packets
ip accounting access-violations
no snmp trap link-status
!
interface FastEthernet0/1
description LAN outside
ip address 172.16.130.16 255.255.0.0
ip access-group red-list out
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
bandwidth 2048000
ip address 172.17.4.134 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 2000000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
redistribute connected subnets
redistribute static subnets
passive-interface FastEthernet0/1
network 3.77.0.0 0.0.0.255 area 0
network 172.17.4.132 0.0.0.3 area 0
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.16.0.4
ip route 3.50.2.0 255.255.255.0 172.17.4.142
!
no ip http server
no ip http secure-server
ip nat inside source static 172.18.130.5 172.16.130.5
ip nat inside source static 172.18.130.6 172.16.130.6
ip nat inside source static 172.18.130.9 172.16.130.9
!
ip access-list extended red-list
permit ip 172.16.130.0 0.0.0.255 any
deny   ip any any
!
control-plane