I enabled the firewall, put a single port in destination port, selected CORE WAN IP as destination IP, and have it working the way I want it.
Oh, and I reset the firewall first (using the button in web admin), and truncate'd pluto_main.Firewall via mysql.
See if that helps you to get port forwarding working. And Internet access working for the internal net. Once we have confirmed this working for everyone, we can attack the other open issues.