A long delay when connecting to a server behind a firewall may be an attempt to connect to the secstore port.
Terminals booting with a remote fileserver, and some configurations of drawterm, will look for a secstore server, by default at address tcp!$auth!5356. If the auth machine isn't running auth/secstored, normally the client will immediately receive a tcp RST to show that the port is closed. But if a firewall is blocking the port by silently dropping packets, you'll get a long timeout instead. Can you configure the firewall to open tcp port 5356? If not, you can specify a different secstore address with argument '-s address' for drawterm, or by replying '[EMAIL PROTECTED]' instead of just 'okamoto' to the user: prompt when booting. If you don't have a secstore, just give an invalid dial string: user: [EMAIL PROTECTED] or drawterm -c cpuserver -a authserver -s !