Just expose port 3128; we don't need to remap