Your problem is indeed NAT. If you have to oepn each and every ports, u’ll end up selling tylenol!!!
Check if your modem/router has DMZ mode. If so, place the Tenor in DMZ mode, i.e set the Tenor ip address in DMZ. Thats all and no more configs.
Hope it helps you.