To ensure the traffic that hits your internal router is routed on to your Pi, you may need to add in two more rules to your internal router configuration.