In order to control access within our private network, I
changed the subnet mask from 255.255.255.0 to 255.255.0.0. This way,I can set up separate IP ranges for various groups and servers.
I changed the subnet mask in INETCFG and in the BorderManager Setup
under HTTP Proxy and VPN.
I changed the filters for ping and telnet to reflect the new subnet
mask.
My private IP address is 10.1.1.1 subnet mask 255.255.0.0
My public IP address is 128.100.100.2 subnet mask 255.255.255.0
Most of the PC's are in the range of 10.1.1.2 - 10.1.1.254. They allhave a subnet mask of 255.255.0.0. Everything works fine with them.
I have one PC that I am testing the new subnet that has an address
10.1.10.2. I CAN ping and telnet to the public side but I cannot usethe browser. I have proxy set to 10.1.1.1 like all the other PC's do.

I cannot get to any public web sites from this IP address..
I feel like the concept is sound, but I must be overlooking something.

With the subnet mask set like it is, I should be able to use any IP
address from 10.1.1.1 to 10.1.254.254. Everywhere I can see a subnet

mask it is set to 255.255.0.0. Can anyone suggest a setting that I
may have overlooked?

Thanks,
Mark