some tweaks in tracking down NAT nastiness