I have ZoneAlarm free edition...

"Received incoming this session" is false.

The NAT router is a fairly simple one, and I have complete control of it (err... limited only by my own knowledge).

Browsing through the settings, it looks worth playing with the "virtual server" settings (Global port / local IP / local port / service type). First I'll need to track down my MAC address and allocate a fixed IP address.