If the device can&#x27;t communicate outbound then no you&#x27;re completely safe. There&#x27;s no magic into this, hole punching is just a silly name for a simple technique.<p>Hole punching works when both A and B are behind NAT. It also allows B to contact A if A is behind a NAT (no matter if B is behind one or not). If both A and B have public IP&#x27;s then the hole punching is &quot;already done&quot;, they can already connect to eachother.