I too was astounded by the Port Forwarding overriding the Deny All rule and still think this is a fault that should be fixed - however, I discovered that it can be overcome by adding 2 new Access Rules.- An ALLOW rule for the required port with the S...