He may need additional configuration in his router. Does he have access to it ? If so he needs to forward port 20595 to his computer to be able to host the game. It is however strange that he cannot join. Can he try to join another game on the lobby ?
Similarly if he is on a school or another restricted network he might need a VPN.