this is probably a problem, but NAT doesn't work all that great