Hi,
By default, all traffic from your local LAN network is allowed to WAN (internet).
To forward traffic from WAN on port 1883 to your LAN device, please, try configuring the port forwarding rule as follows:
The internal IP address should be the IP address of your Publisher (controller).
If this does not work, please, disable other firewall rules that you created and try again.
If this does not help, please, download a troubleshoot file from System -> Administration -> Troubleshoot. Attach the file to your previous question by editing it.
Kind Regards,
Andzej