One other question: is it required to make the "Port translation" setting on the virtual server "preserve-strict"? Preserve-strict always makes me nervous, because if some other connection already uses the same ephemeral port you just tried to connect with, then strict means you won't translate the port and will just send the client a TCP RST (reset), breaking their connection. So is it absolutely required that it be "preserve-strict", and if so why?