Standard NAT (Stateful) RANDMAP (Stateless) SYN SYN-ACK FWD REV SYN SYN-ACK MASK UNMASK Client A Conntrack Table Internet Client B Bitmask Engine Internet