hole punching seems to be working, disabled the port forward and can still ping from external nodes to internal nodes