add forwarded-port via firewall-cmd

┌─[ubuntu]─[~]
└──╼ firewall-cmd --zone=public --add-forward-port=port=80:proto=tcp:toport=80:toaddr=10.0.3.223 --permanent

┌─[ubuntu]─[~]
└──╼ firewall-cmd --zone=public --list-all
public (default, active)
  interfaces: enp0s8 enp0s9
  sources:
  services: dhcpv6-client http https ssh
  ports: 5000/tcp
  protocols:
  masquerade: no
  forward-ports: port=80:proto=tcp:toport=80:toaddr=10.0.3.223
  icmp-blocks:
  rich rules: