Why dont you just DMZ your apex? saves the time with port forwarding. there is no way anyones going to hack your apex to get into your PC, (
demilitarized zone) is what DMZ strans for is anyone cares lol But if you do that all traffic that is directed at your outside IP will all goto the APEX