A NAT rule is not enough to allow the traffic. It only rewrites the address field of the packets.Ensure you have a corresponding firewall rule on the WAN interface with the internal host as the destination.Bart...