You do not need every textbook detail of TCP/IP, but you do need to tell failures apart. "Connection refused" means the host answered and nothing listens on that port, while a timeout means packets were silently dropped. That one difference tells you whether to check the app or the firewall. CIDR and private ranges matter when you size a subnet or ask why a private server cannot reach the internet without NAT.