Since everything is behind the nat, the rabbit boxes don't have public IPs so
adding a hole to the nat for this doesn't make sense.  They are't reachable
from the outside world.