Expose services running inside containers with NAT on the parent machine