+<dt><b>NAT traversal</b></dt>
+<dd>As long as one node in the VPN allows incoming connections on a public IP address (even if it is a dynamic IP address),
+tinc will punch UDP holes through NAT devices, allowing direct communication between peers.
+</dd>
+