Thanks for that. I've removed the forwarding rules, as you say they are not needed.
Okay so I've simplified down to using the following, but if I do that how does VLC know which camera it is to access, as they are defined by the virtual machine ports of 65001, 65002, 65003 for each camera...