are sent to the uplink (ConnectTo), which will have to forward them for us (kernel should do that). This is for people behind firewalls.