I think you need to do it on LAN interface (where connection is incomming)
Did you add it by Firewall --> NAT ->port Forward ?