I have 1 switch and from my own network i can manage it (most of the time from myiPhone after restarting the app)
But from outside it will not work and i am unable to connect.
I have all the DNAT rules in place;
I need to get this working and have this 1 switch to test, did i get all the ports or do i need to open more?
You shouldn't have to do any DNATing at all, the WeMo connections are outgoing to the belkin servers. The most you should need is port triggering if your firewall blocks outgoing connections. In fact DNAT back in is pretty risky - you may end up being a IoT virus host at best, or let someone else gain control of your wemos at worst...
Are you certain this is the problem and not something else going wrong with remote enabling your Wemos?