Comment by justsomehnguy

I hate to be that guy, but: there is no 'deny' action in NAT.