Yeah that's what I thought, the nodes have to accept incoming connections.

For example, by default, they don't with Umbrel.