>Quick question - does a client have to be acting as an ultrapeer before it can be the receipient of out-of-band replies ?

No. It just has to demonstrate (through use of automatic tests LimeWire performs) that it can recieve unsolicated UDP and TCP packets from users outside of its subnet.