[WireGuard] Client changes endpoint port, why?

[Bruno Wolff III]

On Thu, Jul 07, 2016 at 14:45:22 +0000,
  Jan De Landtsheer <jan at incubaid.com> wrote:
>
>nope, Start with basics, use pub ip to pub ip
>BTW, can a client run behind NAT ? (I assume not, as AFAICT both need to
>listen on a port)

The one behind nat can hold the tunnel open so the other end can always 
reach it.