On NAT nodes, ProxCP uses iptables to forward miscellaneous traffic to NAT virtual machines via public ports.