Three more tips:
- Check the Wiki! https://wiki.ipfire.org/configuration/firewall/rules/port-forwarding
- Group services! If your server is providing more than HTTPS, consider to group all services into one group to simplify rules summary
- Backup before make any test
