add workaround for NAT or tunnel access