Today in our newest take on "older technology is better": why NAT rules!
Instead of nat and port forwards that rewrite, your firewall is set to only forward specific traffic, exactly how'd you'd configure outbound forwarding on a nat network (but opposite directions)
Open forwarding is a router, not a firewall