Ok - I'm stumpped. I have a camera inside my network that is using dynamic dns (no-ip) so it can be accessed from the internet - specifically on port 2263 (TCP/UDP).
My network looks like this: Internet router --> MX64 -->core Switch -->Access switch-->Camera.
The camera is accessible from inside the LAN by IP:2263, so I know the LAN is not an issue. Forwarding rules look like this (the other forwarding rules work just fine):
When I try to ping the camera from external of the network via DNS, the packets stop after the internet router (I see the attempt to connect to the LAN). so the firewall has to be the issue. I only have one IP at this location (DSL), so 1:1 NAT is not an option.
I have had some port forwarding issues in the past where simply restarting the MX resolved the issue. Maybe give that a shot? Also if you click into the device page for that camera are you able to verify that the MX is applying the forwarding rules for that device?