You're a gentleman and a scholar, sir - that did it.
For some reason, DSM wouldn't let me pick a port outside the router's range (2-254), so I went into the router and adjusted the range to max out at 150, then set the IP for the NAS at 200, manually forwarded ports in the router settings...