[Serusers] TCP endpoints behind NAT