Hi!

Wanted to ask you a question: do a client behind the NAT needs to declare a
listening port?

here is my conf w/o listening port and it obviously  works (I guess the
server-2-client connection works because of PersistentKeepalive )

server:

[Interface]
PrivateKey = *********
ListenPort = 500

[Peer]
PublicKey = *********
AllowedIPs = 192.168.4.2
PersistentKeepalive = 25

client:
[Interface]
PrivateKey = *********

[Peer]
PublicKey = *********
Endpoint = serverip:500
AllowedIPs = 0.0.0.0/0
PersistentKeepalive = 25

Thanks in advance.

-- 
Rostislav Belotserkovski