behind NAT, connecting to a public server. wg show has the comms intf