Switch outbound transport from tcp to udp. With Asterisk peer nat=yes, Asterisk now sends the INVITE to the public source address (78.141.29.181:<port>) instead of the watch's private Contact, so incoming calls traverse the NAT and reach the watch. Verified: external incoming calls now arrive (uaEvent: incoming call from external caller logged on the watch).