if it's behind cgnat, the best option is to set another server as a "relay" (can be the netmaker server)