How do you know it doesn’t start? Just based on the log messages? It’s the expected output. Your proxy is working. If you want more messages, pass in -verbose
.
The latter. All routers in the way need to have an unrestricted NAT.
The easiest way is to set up port forwarding. See How to set up standalone snowflake behind restrictive NAT? - #2 by WofWca. About the firewall: I’m not sure.