Assuming you have no other ppp connections active, create a forward rule allowing traffic from incoming interface all ppp to public interface, another rule allowing ESTABLISHED and RELATED traffic (output all ppp) from the public interface and drop the remainder of forwarded traffic.
AFAIK you need later ROS 6 to have “all ppp” as an interface choice.
This should do it.