Your mainproblem is that the other user may use other Ports than the Standardport. In this case Astaro will block the Traffic, because it's a Firewall not a Softwarerouter. That means:
MX-User with IP-External Port 3000 (for example) will connect to your IP-External-NIC Port 6699 and he can't because Astaro will block it.
Make:
Networks: MX-Machine IP 192.168.0.33 (for example) Services: MX Fire tcp/udp 1:65535 1:65535 MX client tcp/udp 1:65535 6257:6699 NAT/Masquerading: MX Any -> *** your external Interface*** / MX Fire None MX-Machine / MX client Rules: Any MX Fire MX-Machine Allow
This will open ALL Ports but route them to the specified 6257-6699 on your target Machine, it's a little risky because all your Ports will show up as closed not as stealth but it should work.
Your mainproblem is that the other user may use other Ports than the Standardport. In this case Astaro will block the Traffic, because it's a Firewall not a Softwarerouter. That means:
MX-User with IP-External Port 3000 (for example) will connect to your IP-External-NIC Port 6699 and he can't because Astaro will block it.
Make:
Networks: MX-Machine IP 192.168.0.33 (for example) Services: MX Fire tcp/udp 1:65535 1:65535 MX client tcp/udp 1:65535 6257:6699 NAT/Masquerading: MX Any -> *** your external Interface*** / MX Fire None MX-Machine / MX client Rules: Any MX Fire MX-Machine Allow
This will open ALL Ports but route them to the specified 6257-6699 on your target Machine, it's a little risky because all your Ports will show up as closed not as stealth but it should work.