or you have to foward ports at the NAT router