Well, double NAT is here and some pain with it ...