NAT traversal would make sense. I tried finding some more details on how IPFS uses it and if there are any configuration options, but I wasn’t finding much.
My understanding is that if you have UPnP enabled you shouldn’t need to manually open any ports. If not, then you’ll probably need to open 4001 in your firewall.