Does this make sense to anyone?  The new "no-callback" feature in 4.5
still makes a callback from the client to the server.  "man bpclient" says:

     -no_callback 0|1

               0 = When connecting  to  the  client's  bpcd,  the
               client  connects  back  to  the server on a random
               port number (default).

               1 = When connecting to client's bpcd,  the  client
               connects  back  to  the  server  on the vnetd port
               number.

So, in both cases the client "connects back to the server", which is
another way of saying "callback".

We're trying to make netbackup work on an outbound connection only, from
inside a firewall to outside, also via a NAT.  This no-callback feature
doesn't really turn off the callback.  The main problem is the NAT - the
external client is trying to connect back to the server's internal address
instead of the NATed address.

Is there a good way to make this work?