Incoming SYN Issue: Binding created on observing outgoing SYN Other side tries TCP simultaneous-open: Also sends a SYN Binding has already been created, does NAT allow incoming SYN? Recommendation: Yes Also, NAT should be capable of tracking simultaneous-open handshake |