I believe the port forwarding should be done on the primary router/modem and not on a Time Capsule or AirPort Extreme. Both or either of these are wifi routers but, afaik, not the machines that are the primary connection to your isp service "at the wall".
The modem/time capsule set up is so that the modem in the wall is only the modem and all router/NAT etc functions are managed internally through the time capsule and manage outwards to the ISP.
External access into the OSX server is fine it is onty FMS that I am having an issue with.
I see. I use my AE in bridge mode. I would suggest getting another time capsule or airport extreme and use one to forward to the OS X server machine and the other to the FMS machine. The machines should show up via bonjour and you can forward to each specifically. Otherwise the ports you mention are used by both and that won't work if you need full functionality of OS X server and FMS. Others will have more knowledge than I.
Thanks again Mike.
Some posts I have read suggest that the ports can be changed during setup for FMS14.
I was hoping to be able to use alternate ports.
I have turned off webservices on the OSX server but the ports are still held for this server. Deleting the ports on the OSX server is greyed out, but it could be an alternate fix too.
Bypassing the time capsule may be possible but will NAT conflicts be a potential issue?