Reorder NAT rules by specificity.
Remove a redundant FORWARD rule.