Which address translation scheme would allow a single public IP address to always correspond to a single machine on an internal network, allowing "server publishing"?