https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/4/html/security_guide/s1-firewall-ipt-fwd Some good explanation, similar to your case with the port forwarding and opening your private server publicly.
