 As traffic passes from the local network to the Internet, the source address in each packet is translated on the fly from a private address to the public address.The router tracks basic data about each active connection (particularly the destination address and port).When a reply returns to the router, it uses the connection tracking data it stored during the outbound phase to determine the private address on the internal network to which to forward the reply.