router IP
I would change the port on the router, so that it is something like this: Port 33899 (instead of 3389) forward to 192.168.X.X:3389. Then from the outside, you go into mstsc and type ip.of.router.wanport:33899
the 33899 just keeps it from people scanning port 3389 for open boxes. i change nearly all my ports, even if it's only in the port forwarding that it's changed.