[deladriendil]

Grumpy, thanks for continuing to assist. to answer your questions

Yes
eqemu_config.json with removed user/pass

     "server" : {
          "chatserver" : {
               "host" : "",
               "port" : "7500"
          },
          "database" : {
               "db" : "peq",
               "host" : "localhost",
               "password" : "",
               "port" : "3306",
               "username" : ""
          },
          "mailserver" : {
               "host" : "",
               "port" : "7500"
          },
          "qsdatabase" : {
               "db" : "peq",
               "host" : "localhost",
               "password" : "",
               "port" : "3306",
               "username" : ""
          },
          "webinterface" : {
               "port" : "9081"
          },
          "world" : {
               "http" : {
                    "enabled" : "true",
                    "mimefile" : "mime.types",
                    "port" : "9080"
               },
               "key" : "OcDY7lFcmIkfghhKNpyPj2qFKErDINZ",
               "loginserver1" : {
                    "account" : "",
                    "host" : "<address>.no-ip.biz",
                    "legacy" : "1",
                    "password" : "",
                    "port" : "5999"
               },
               "loginserver2" : {
                    "account" : "",
                    "host" : "<address>.no-ip.biz",
                    "password" : "",
                    "port" : "5999"
               },
               "longname" : "some name",
               "shortname" : "some name 070_pop",
               "tcp" : {
                    "ip" : "<address>.no-ip.biz",
                    "port" : "9001"
               },
               "telnet" : {
                    "enabled" : "true",
                    "ip" : "<address>.no-ip.biz",
                    "port" : "9000"
               }
          },
          "zones" : {
               "defaultstatus" : "0",
               "ports" : {
                    "high" : "7400",
                    "low" : "7000"
               }
          }
     }
}

login.ini

[database]
host = localhost
port = 3306
db = peq
user = 
password = 
subsystem = MySQL

[options]
unregistered_allowed = TRUE
reject_duplicate_servers = FALSE
trace = TRUE
world_trace = FALSE
dump_packets_in = FALSE
dump_packets_out = FALSE
listen_port = 5999
local_network = 192.168.99.
auto_create_accounts = TRUE

[security]
plugin = EQEmuAuthCrypto
mode = 5

[Titanium]
port = 5998
opcodes = login_opcodes.conf

[SoD]
port = 5999
opcodes = login_opcodes_sod.conf

[schema]
account_table = loginserver_server_accounts
world_registration_table = loginserver_world_server_registration
world_admin_registration_table = loginserver_server_admin_registration
world_server_type_table = loginserver_server_list_type

for the moment I have the windows firewall completely disabled on win 10 pro box. win 10 has a static ip

port forwarding looks like

5999
5998
9000
7778
7000-7500

QoS is disabled on the router
UPnP is disabled on the router
IPv6 is disabled on the router

this is a netgear R6230 with the latest firmware.
I can login from LAN machines without issue using RoF2 client. anyone trying to come in from the WAN gets timeouts on the zone ports (7000, 7001, etc.)

zone.exe is starting all of the zones on 127.0.0.1:<random high port> like 61130

if I use a site like yougetsignal.com for port 7000 its showing as closed. yet 5999 is open

netstat /an does not show those ports as listening on the win 10 box. tho 7778 is.