Firewall/NAT

I have followin config:
ISP <-> (Static IP) ADSL Modem  (172.16.17.1) <-> (172.16.17.2) monowall (192.168.0.250) <-> 192.168.0.0/24 LAN
I've added rule to WAN to allow everything and disable "Block private networks" on WAN
Also I've forwarded some ports to internal LAN servers
from Internet I'm trying to do telnet on one of the forwarded ports but no luck. I can see my telnet reaches internal server and this server sends reply to my telnet:
12:15:54.738652 IP 84.201.225.105.41096 > 192.168.0.1.1234: R 278343896:278343896(0) win 0
12:15:57.003522 IP x.x.x.x.41099 > 192.168.0.1.1234: S 1016496907:1016496907(0) win 5840 <mss 1452,sackOK,timestamp 203890189[|tcp]>
12:15:57.003555 IP 192.168.0.1.1234 > x.x.x.x.41099: S 3418369840:3418369840(0) ack 1016496908 win 5792 <mss 1460,sackOK,timestamp 215972553[|tcp]>
12:15:57.017836 IP x.x.x.x.41099 > 192.168.0.1.1234: R 1016496908:1016496908(0) win 0
12:15:59.999317 IP x.x.x.x.41099 > 192.168.0.1.1234: S 1016496907:1016496907(0) win 5840 <mss 1452,sackOK,timestamp 203890939[|tcp]>
12:15:59.999367 IP 192.168.0.1.1234 > x.x.x.x.41099: S 3465179383:3465179383(0) ack 1016496908 win 5792 <mss 1460,sackOK,timestamp 215972853[|tcp]>
12:16:04.198425 IP 192.168.0.1.1234 > x.x.x.x.41099: S 3465179383:3465179383(0) ack 1016496908 win 5792 <mss 1460,sackOK,timestamp 215973273[|tcp]>
but never reaches my Internet server:
# telnet x.x.x.x 1234
Trying x.x.x.x...
telnet: connect to address x.x.x.x: Connection timed out

I can ping x.x.x.x from internal network. I can ping internal server from ADSL Modem. traceroute shows right path but... nothing works