I had a brilliant idea.  Ignore the advice in the smb.conf file and configure the 
interface = ... line to only list the intranet side of the box - it now works.

> 
> Maybe someone from this group can help me.  The script below can set up one of to sets of
> rules:  masquerading with the interfaces wide open, or masquerading with a firewall.
> 
> I apparently have something use up incorrectly because I can't connect to the machine from
> the intranet side of the the box.
> 
> The internet side is at 24.x.x.x and the intranet side is at 192.168.1.1.
> 
> Can anyone spot anything?
> 
> Thanks in advance.
> Stephen