Just a thought; what happens if you temporarily enable upnp? Do you get an open-nat then?
Are you aware of this thread: