Wanted to ask you a question: do a client behind the NAT needs to declare a listening port?

here is my conf w/o listening port and it obviously  works (I guess the server-2-client connection works because of PersistentKeepalive )

server:

--