updated to use NAT