I use Zone Alarm Pro. And I think I answered my own question. I disabled the open ports within the firewall and just granted the program permission. (while still keeping the port forwarding) I then ran a port check through GRC.com and it had full access to the ports.

So, I then shutdown my client and tried it again. This time no access to the ports. Looks like I may need to get peer guardian after all.