Well the EQemu login server is on 207.36.180.194, no clue on the port... never bothered to check since I allowed all ports from that IP.
Everquest itself uses a random UDP port everytime, if I remember correctly, so just open all UDP ports to the Winter's roar IP, which happens to be 67.15.24.48 (resolves to wintersroar.com).
Hope that helps.