Hello Philip,
I don't have wsrep_provider_options set.
My wsrep configuration behind the nat is:
wsrep_provider = /usr/lib64/galera-3/libgalera_
smm.so
wsrep_cluster_name = "[...] - Net-Galera"
wsrep_node_name = "mysql0"
wsrep_node_address = 192.168.7.203
wsrep_sst_receive_address = 91.106.X.1
wsrep_node_incoming_address = 91.106.X.1
wsrep_cluster_address = "gcomm://91.106.X.2"
wsrep_sst_method = rsync
wsrep_sst_auth = sst:sstMEsecret
greatings
Benedikt