Perhaps this is a stupid question, but can you also forward ports from a public interface (not localhost)?

I believe this isn't supported at the moment. However this is on our radar and we may implement it in the future