Today was an interesting day. We are setting up a honeypot in the campus and I was asked to check if all the ports in the honeypot VM are accessible from the pubilc internet. ####The Problem The setup is pretty simple. The honeypot is run in an VM behind the campus NAT. Any IP packet addressed to the public IP of our VM should be NATed properly, rewritten and sent to the private address of the VM.