All fixed!
The router configuration has been updated and everything is once again reachable from the Internet. I see that clients have already happily connected to the PRPnet servers and gotten some long-awaited tests.
Gary, I'll send you some directions (with screenshots!) for how to do this yourself in case it ever happens again. I'll also send them to Dave. The fewer maintenance tasks that "only one of us can do", the better.