MNF and Shorewall port forwarding
Edit /etc/shorewall/rules to include the following line before the end of the file:
DNAT net loc:192.168.10.10 tcp 8080 - 220.127.116.11
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
Where 192.168.10.10 should be replaced with the IP address of the machine on your local network and 18.104.22.168 should be replaced with your public facing IP.
If you don't know that IP address, or don't have a static IP, leave it blank.
then restart shorewall with # shorewall restart