nat = auto_force_rport ; Set the force_rport option if Asterisk detects NAT (default)
nat = auto_comedia ; Set the comedia option if Asterisk detects NAT
Ideally your remote users should do what a properly configured Asterisk does and resolve the NAT issues locally so that the SIP is done purely in terms of public addresses.