But it works well for a single client behind a misconfigured nat, which is a depressingly common problem.