Hi!

In this case you don’t need to do any port forwarding in the router, the VPN is already doing it for you, just bind the listener to the interface connected to the VPN and use the public VPN address in the backdoor.

Greetings!
Diego