I have syncthing running on a system on my home LAN which connects to the internet via a standard NAT router. The system that I synchronize with is a virtual server out on the internet.
The router firewall allows outgoing connections on any port but blocks incoming connections except on ports which I have specifically opened. Much to my surprise the two systems seem to be able to synchronize without any incoming ports being opened.
Is this what the following (from the Firewall Setup) means:- “Communication in Syncthing works both ways. Therefore if you set up port forwards for one device, other devices will be able to connect to it even when they are behind a NAT network or firewall.”
I.e. does the above mean that as long as a connection is possible in one direction on port 22000 then everything will work OK?
… or should I open up port 22000? I’ve not tried changing something on the remote system and seeing if it gets back to my LAN.