还是上面那个例子:如果 client a (
the issue of cone versus symmetric nat behavior applies equally to tcp and udp traffic. cone nat is further classified according to how liberally the nat accepts incoming traffic directed to an already-established (publicip, public port) pair. this classification generally applies only to udp traffic, since nats and firewalls reject incoming tcp connection attempts unconditionally unless specifically configured to do otherwise.