Reply to post:

Your problem there wasn't running XP machines with a public v4 address, it was failing to put them behind a working firewall. Moving them behind NAT wasn't necessary, you just needed that firewall.