Redirect https://ourdomain.com:XXXX to internal server works, but can't access https://ourdomain.com:4443 or 4444 for admin/user portal. I think I have re-directing wrong?

Question

Setup is: ISP->XG230->Port3 - ServerA 
 ServerA holds multiple services that are accessed from outside via: 
 https://ourdomain.com:8065 , https://ourdomain.com:1666 , https://ourdomain.com:XXXX , etc... 
 So, in order to get the XG230 to redirect incoming traffic to ServerA, I set up a Business Application rule: 
 Source: WAN - Allowed client networks: Any 
 Destination host/network: ourdomain.com IP address - Services: Any 
 Forward to: Protected Server: ServerA 
 All the services that need to be accessible from outside are working - but, when I try admin/user portal I can't reach it from outside or internally. 
 https://[ourdomain.com IP]:4443 or :4444 
 I'm sure it's because of how I'm re-directing traffic to ServerA. Is there another way for me to re-direct the https://ourdomain:XXXX traffic to ServerA and leaving https://ourdomain:4443 and https://ourdomain:4444 intact? 
 Thank you.

LuCar Toni · Accepted Answer

I am not a fan of using ANY in DNAT. This is just highly insecure. I would go the other way and simply start to configure the needed Ports (Range).

Aditya Patel · Answer

Hello SrCiruja, 
 It does seem you have also port forwarded the administration port and user portal. I would recommend specifying the list of "Services' allowed to your server. In this case, only the mentioned list will be port forwarded and the rest will remain untouched.

SrCiruja · Answer

Ah, thank you - 
 Instead of putting "Any" in services, I made a Services in System->Host and Services that had the following settings. 
 So, it reroutes all TCP requests except htts://mydomain.com:4443 and :4444 to the internal server. 
 Thank you,