>>957847
Sounds like you shouldn't be port forwarding. Only allowing traffic from the hosts for the specific ports to your network. That should be a firewall rule.