fixing NAT punchthrough