Allow access to NTOP from WAN

[XDJ]

My apologies in advance if this is the wrong forum… I wasn't sure if this is a Firewall question, NAT question or NTOP question.

I have installed the NTOP package, and set it to run on the LAN interface.  (I assume this is correct, as I would like to monitor the LAN activity of my PC's.)  However I would like to be able to access NTOP from the WAN side.  I have tried opening port 3000 in the firewall rules.  I've also tried a NAT redirection of port 3000 to the LAN IP...  However, neither of these worked.

Is there anything I can do, shy of VPN'ing to the LAN side?

Thanks!