This maps a public IP and port number to a service inside the network. 123.234.243.120:8080 might map to 196.0.0.0.22:80 for a self-hosted webserver, for example.