servent A cannot open a conection to servent B, but servent B can open a connection to servent A.
so if you are behind a firewall, you will probably only have outgoing conections. and others cannot take your files (http get), they have to ask you to giving the files to them.(gnutella push)...