transparent to the NAT server