NAPT is for facilitating internet traffic despite shortage of ip addresses, the opposite of a firewall in a way. So it's a success, not a bug, if it manages to enable some incoming traffic.