Run a scan on the router, too, to see if the ports themselves have actually been opened, e.g.:

nmap -n <ROUTER_IP_ADDRESS>