its still not going to mask the router ports at main level just within his own network, thats what proxy is, not many people use them anymore, so say accounting cant access manager computer groups etc etc