Remove inbound NAT functionality for MGMT purposes, it is not used and causing confusion.
While here: restrict outbound ports to used services.