You may need to setup HAIRPIN NAT to get this to work. What that does is NAT's anything from your internal LAN, trying to get to your public IP, to whatever is NATTed (Port forwarded) so basically re-writes packets bound for your public ip, to whatever the internal IP is so it can actually get to where it needs to be.