Ongoing support hole punch with one side of symmetric NAT/FW