Yes, I did it manually. I do not want to open port 80, port 554 is needed for RTP which won't work through NAT anyway (and Camera does not allocate UDP ports through UPnP - another bug), and the main reason is that in order for NAT loopback to work, rules should be created with different filter...