I expect that most of us would agree that Luca has it right. Unless the natted host opens itself up globally and permanently to UDP and/or TCP traffic after being punched, it will be of little use with lookups. Thanks -greg