Hello, friend!
For the first question, visit the following link: port mapping
But you need to make sure that the port you are forwarding is open.
The second problem is that the ONT does not provide the firewall function. The firewall is another product.
To use the firewall, you only need to enable the firewall on the PC.
Thanks!