yep, the remote clients cant set an inbound port, so my local servers need to have an inbound port to make the handshake work