works with NAT!