no NAT by default