Abstract: A system and method for network address translation that enables an inbound connection from the public network to a privately addressed host residing on a private network. The stated invention functions as a reverse proxy mechanism assigning a dynamic port number to uniquely identify each inbound connection from the public network to a host on the private network. The defined proxy device uses regular and reverse mapping and employs use of the passive command to notify the client on the public network of the said unique port number assigned for the inbound connection. When the session is completed, the port is returned to the pool to be reassigned as needed.