Comment by bboreham

Most consumer routers will by default block a connection _from_ the Internet. They use a private address range and apply NAT to outgoing connections, so explicit configuration is needed to do something with an incoming connection.