Yes, this is supported by almost all routers, but by almost no provider, or only with a very expensive additional option.

Yes, the router has its own firewall. Port forwarding can be done via NAT or the entire traffic can be forwarded to a specific IP if you hang the router in front of a firewall, for example.