So basically I've been trying to get DNAT working on my Palo Alto firewall working for a while. I don't have much to add other than the attached config.