How should openfire be forwarded?

When I am forwarding the 9090,5222 port of the intranet,internet clinet can not login openfire,
Intranet direct connection can be used。How should openfire be forwarded?

tcpdump as shown below:

There is no special condition to do that. Btw, only 5222 is needed for client connection. Maybe your firewall is blocking it.