Well they're not behind the firewall they're right before it, the ports are also forwarded.
<?xml version="1.0">
<server>
<world>
<!-- Set the shortname to ONE word. The longname is what shows up on server list -->
<shortname></shortname>
<longname></longname>
<!-- DO NOT EDIT ANY LINES BETWEEN HERE AND THE DATABASE SECTION -->
<!-- <address>104.205.XXX.XXX</address> -->
<!-- <localaddress>192.168.1.XX</localaddress> -->
<!-- Loginserver information. DO NOT EDIT -->
<loginserver1>
<host>login.eqemulator.net</host>
<port>5998</port>
<account></account>
<password></password>
</loginserver1>
<loginserver2>
<host>127.0.0.1</host>
<port>5998</port>
<account></account>
<password></password>
</loginserver2>
<!-- Server status. Default is unlocked DO NOT EDIT RIGHT NOW -->
<!--<locked/>-->
<!-- <unlocked/> -->