Hairpin NAT works by default. Just reach your own pub IP with the destination port you are forwarding and the MX will hairpin it back. Be mindful however that if your MX is behind NAT itself (double NAT) the upstream device is in that case the one that needs to hairpin.