Use NAT hole punching if you're advanced, or you could fall back to IP/port filtering