are your client nodes behind NAT