Allowing external devices to make and modify their own port forwarding rules has security implications. If you plan to use these services, be aware of the risk. In such circumstances, it might be a good idea to dedicate a separate interface for these services (and other risky traffic). If you aren’t using your DMZ for any other services, you might consider using the DMZ.