Applets can normally only open a socket  back to the server from which the applet
originated. This leaves you with two
options:

1.) Connect to a servlet or other process on the originating server and have
that process connect to the socket.
Essentially the servlet or other process becomes a proxy.

2.) Sign your applet.