Sophos Setup and Synology

Kinda trying to setup Sophos, and also use my NAS from outside.

My ISP uses DHCP on modem(router)

ISP says i can 't use these ports

• TCP-poorten: 25, 53, 135, 137, 138, 139, 161, 162, 445 en 1080
• UDP-poorten: 53, 135, 137, 139, 161 en 162

in the ISP modem config, all i can set is the DMZ Adress (IP) from the Sophos PC. 192.168.0.219
And opening ports to the outside

On the Sophos install, have my WAN NIC getting DHCP adress.
My LAN NIC 10.10.0.1, and DHCP Server for the clients.
On my LAN I have a synology NAS 10.10.0.74 running, wich i would like to connect to from outside.
There also i can set the ports to connect from outside

So have NO IP (dynamic DNS running)

Now the question is do i setup the no ip on the WAN NIC, LAN NIC or on Synology. (when setup on synology, can i still get access to Sophos Web from outside )
When then using Webserver protection, i kinda run in to problems.

When local and using the DNS name in browsers, i all runs ok.
Then from outside, i can access the webman synology page, but not in de software ... (connection problems, https problems. etc...)

I think it 's just a stupid setting, or a forward, but kind find it untill now. :(

Been hassling with this some days now,