If the server has only a private IP, you will need to forward the traffic
from the firewall to the RRAS server's IP (tcp port 1723 for PPTP). You then
use the firewall's public IP in the client to make the connection.
The connection will fail if the firewall blocks GRE (IP protocol 47) .