For what it's worth, the FAQ has a section about NAT. If you click on 'Help' it also specifically mentions the use case of: "... checking and verifying your NAT router's WAN-side security..."