This one time, at band camp, Stefan Thuering said:

> > this is perhaps only a minor annoyance, but when i moved to m0n0wall i
> > lost this ability.  behind my inexq this was no problem.  can anyone
> > explain why this is not possible to implement?  is it a limitation, or
> > by design?
>
> If your ISP offers a web proxy feature you can use it to test your
> nat'ed ports (because you then go out and come back in).

yet another clever idea i hadn't thought about.  however, my isp has no
web proxy :(

jj