reviving a somewhat older windows server, have some questions

[khalathas]

Ok I'm back. System works great on LAN...will not work for clients outside the router. They can get logged in and get to the server select screen..but they can't get character select. Black screen and dump to login screen. I know I have the port forwards needed (I did 7000-7100, 9000, and 5990-5999, to catch any ranges the server might want). I've gone so far as to temporarily DMZ the server machine itself. The OS firewall is completely disabled (and wouldn't matter since local works fine), and antivirus is not interfering either.

The only two things I can think of at this point would be either a config file being wrong somewhere, or Verizon FIOS blocking the world server's incoming ports, but not the login server's. When I watch the command windows on the server, internally I see the login server catch and resolve the login, then disconnect as it hands the client off to the world server, which I see clearly pick it up and proceed happily. When the client is remote instead of local, I see the login server pick up, resolve, and hand off...but the world server never receives the handoff.

To clarify, I'm using the SoD client, and it works internally perfectly...just does not work externally...and the server at this point is DMZ'd.

I shall include my eqemu_config.xml and login.ini files for scrutiny.

eqemu_config.xml:

<?xml version="1.0"?>
<server>
	<world>
		<shortname>TZR</shortname>
		<longname>Tallon Zek Reborn</longname>

		<!-- Only specify these two if you really think you need to.  (read: You don't) -->
		<address>96.252.231.59</address>
		<localaddress>192.168.1.25</localaddress>

		<!-- Loginserver information.  Defaults shown -->
		<loginserver>
			<host>192.168.1.25</host>
			<port>5998</port>
			<account>(scrubbed for forum)</account>
			<password>(scrubbed for forum)</password>
		</loginserver>

		<!-- Server status.  Default is unlocked -->
		<!--<locked/>-->
		<!-- <unlocked/> -->

		<!-- Sets the ip/port for the tcp connections.  Both zones and console (if enabled).  Defaults are shown -->
		<tcp ip="192.168.1.25" port="9000" telnet="disable"/>

		<!-- Sets the shared key used by zone/launcher to connect to world -->
		<key>(scrubbed for forum)</key>

		<!-- Enable and set the port for the HTTP service.  Defaults are shown -->
		<http port="9080" enabled="false" mimefile="mime.types" />
	</world>

	<!-- Chatserver (channels) information.  Defaults shown -->
	<chatserver>
		<host>channels.eqemulator.net</host>
		<port>7778</port>
	</chatserver>

	<!-- Mailserver (in-game mail) information.  Defaults shown -->
	<mailserver>
		<host>channels.eqemulator.net</host>
		<port>7778</port>
	</mailserver>

	<zones>
		<defaultstatus>20</defaultstatus>

		<!-- Sets port range for world to use to auto configure zones -->
		<ports low="7000" high="7100"/>
	</zones>

	<!-- Database configuration, replaces db.ini.  Defaults shown -->
	<database>
		<host>192.168.1.25</host>
		<port>3306</port>
		<username>root</username>
		<password>(scrubbed for forum)</password>
		<db>peq</db>
	</database>

	<qsdatabase>
		<host>192.168.1.25</host>
		<port>3306</port>
		<username>root</username>
		<password>(scrubbed for forum)</password>
		<db>peq</db>
	</qsdatabase>

	<!-- Launcher Configuration -->
	<launcher>
		<!-- <logprefix>logs/zone-</logprefix> -->
		<!-- <logsuffix>.log</logsuffix> -->
		<!-- <exe>zone.exe or ./zone</exe> -->
		<!-- <timers restart="10000" reterminate="10000"> -->
	</launcher>

	<!-- File locations.  Defaults shown -->
	<files>
		<!-- <spells>spells_us.txt</spells> -->
		<!-- <opcodes>opcodes.conf</opcodes> -->
		<!-- <logsettings>log.ini</logsettings> -->
		<!-- <eqtime>eqtime.cfg</eqtime> -->
	</files>
	<!-- Directory locations.  Defaults shown -->
	<directories>
		<!-- <maps>Maps</maps> -->
		<!-- <quests>quests</quests> -->
		<!-- <plugins>plugins</plugins> -->
	</directories>
</server>

login.ini:

[database]
host = 192.168.1.25
port = 3306
db = peq
user = root
password = (scrubbed for forum)
subsystem = MySQL

[options]
unregistered_allowed = FALSE
reject_duplicate_servers = FALSE
trace = TRUE
world_trace = FALSE
dump_packets_in = FALSE
dump_packets_out = FALSE
listen_port = 5998
local_network = 192.168.1.

[security]
plugin = EQEmuAuthCrypto
mode = 5

[Titanium]
port = 5998
opcodes = login_opcodes.conf

[SoD]
port = 5999
opcodes = login_opcodes_sod.conf

[schema]
account_table = tblLoginServerAccounts
world_registration_table = tblWorldServerRegistration
world_admin_registration_table = tblServerAdminRegistration
world_server_type_table = tblServerListType