Solution 1
Aply a NAT rule to the router to masquerade and redirect port 554 or 8554 ( better if your provider blocks the 554 ), or the TCP port you configured to live555.
Solution 2 (And pretty ugly)
You can open a SSH tunnel from a third host. Sometimes you can't control the Router/NAT/Firewall, so this kind of 'workaround' can do the job...