The ability of applications like Ultravnc and Hamachi to operate behind firewalls through NAT traversal intrigued me. Newport Networks has a whitepaper detailing current NAT traversal solutions for SIP:

Universal Plug and Play (UPnP)
Problem: … relies on the NAT opening pinholes to the outside world under the dynamic control of the UPnP client – maybe a [...]