fixed asymmetric/symmetric NAT/FW punch timeout