all ports must be bound for nat mapping