@User I should document this, but we turned off UDP hole punching for FreeBSD. The thinking is that these devices will usually be routers, and we can expect that they should have a static endpoint (ip:port) to be reachable, as opposed to a shifting "hole punch" address.