Thanks.Most likely it's Symmetric NAT, it's been quite a while since the Full Cone NAT was removed.
It was never accepted into the upstream kernel so the code needs to be maintained by whoever includes it in their product.
I'm trying to figure out where the problem lies.
Is it UPnP or the firewall that's not working properly?