VPN through Firewall

Please Help!! What ports need to be open (DSL Router) for me to VPN from my client to the VPN Server that is behind the DSL router (using NAT)? I can connect when I set the put the servers IP address in the DMZ, but don’t want to leave it that way..