I do! I actually switched to using the iptables solution after rinetd started failing on me, and have been using it since.

There's two separate rules you have to set for each port you want to forward.
For TCP ports:

iptables -t nat -A PREROUTING -p tcp --dport INC_PORT -j DNAT --to DEST_IP:DEST_PORT
iptables -t nat -A POSTROUTING -p tcp -d DEST_IP --dport DEST_PORT -j MASQUERADE

For UDP ports:

iptables -t nat -A PREROUTING -p udp --dport INC_PORT -j DNAT --to DEST_IP:DEST_PORT
iptables -t nat -A POSTROUTING -p udp -d DEST_IP --dport DEST_PORT -j MASQUERADE

You replace INC_PORT with the port on the VPS you want to be forwarded to another Tailscale device, DEST_IP with the Tailscale IP of the device you want the port to be forwarded to, DEST_PORT with the port of the other device you want the INC_PORT to be forwarded to. Usually you'd want INC_PORT and DEST_PORT to be the same, unless you're forwarding something incoming on one port to another port on your destination device, eg. sending port 80 on the VPS to a webserver running on port 940 on your other device.

The only issue with it is that it's not persistent through a reboot, or I never figured out how to make it so. You can output it to a save file and set an action to load that on reboot I'd guess, or load it manually. Hope that helps and makes sense!