mkcloud: fix portfowarding setup and add switch to disable it