add warning for clients behind NAT