Thanks for the reply. I actually just routed the appropriate ports via port forwarding in my router, and now -nonat does exactly what I want it to do.