Draw a network diagram to assist in your explanations of the requirements.
You can daisy chain port forwardings 20 times if you need to, to get to the next device.
These are all DST NAT rules, the only firewall rule needed on each device assuming they are all MT devices is
add chain=forward action=accept connection-nat-state=dstnat