lambee01
First of all a word of warning: opening ports puts your device or even your network at risk.
By default Diskstation uses port 5000 (http) and port 5001 (https). DS Audio will also need port 80 to be forwarded.
To gain access from the internet to the Synology, I recommend using a VPN-connection. You can use the VPN-server build in to the Synology.
Even though I recommend not to use port forwarding to the services directly, you can do it by following the instructions in parts.
You’ll need to assign a reserved IP to the Synology. Next thing, install and setup VPN-Server on the Synology. I recommend using the openVPN Server. Remember the port the VPN server is using, protocol should be UDP. Once the VPN server is up and running, log on to the Connect Box and set the forwarding rule.
Information, on how to setup your devices to access the VPN, can be found on the Synology instructions.