Actually no, it's not the firewalls fault, it is KE.
You see, the software sends the server the IP address so that others can connect to you. The problem is that RF doesn't know what the public IP address is (if you are behind nat) so instead of simply asking you, or doing an automated lookup...