I don't... honestly I find the best way to use the MBG is the way it was intended, with two interfaces, one on the LAN and one directly on the WAN. I don't have any customers doing it any other way.
That said, pretty sure the process is well documented that tells you what ports, etc need to be open/mapped... have you checked the docs and knowledge base?