Security/Firewall Discussion

That is completely incorrect. Try to not forward on a pfsense router and you will be in a world of hurt