Abstract: The network address translation (NAT)-based method of bypassing Internet access denial uses NAT as an identity-hiding technique to bypass Internet access denial. The victim network uses NAT routers as a gateway to connect to neighboring networks, and uses a set of non-blocked Internet protocol (IP) addresses as the NAT routers' external public IP addresses. These addresses are not part of the IP ranges registered to the victim network. Rather, they are obtained from a neighboring network. The outgoing packets, therefore, will not be blocked by the malicious ISP, as they will not be recognized as part of the victim network. The method is scalable and has minimal network performance impact. Although NAT introduces some connectivity limitations, these are overcome by using application-layer routing for server reachability behind NAT, and NAT traversal techniques for peer-to-peer (P2P) applications.