curious about the 3 layers of nat: does a VPN help to deal with the NAT crap at all?