you should turn on udp hole punching with clients ...
# general
b
you should turn on udp hole punching with clients behind NAT