Proof: My interface [ether1] is tagged as [LAN] interfaces-list
Default rule [drop traffic !LAN interfaces-list] does not allow connection over IP from [ether1]
Changing the rule to [drop traffic WAN interfaces-list] allows connection over IP from [ether1]
Changing the rule again to [drop traffic !WAN interfaces-list] still allows connection over IP from [ether1]
=> implies the !-operator does not do anything.
Also makes the default settings impossible to connect with over IP in bridge mode under automatic IP address assignment. You have to change the rule to the drop WAN setting in order for the firewall to properly function.
My guess from the screenshot is that you are having your ethernet ports in a bridge, which means they are slave port (have an S letter next to them in the Interfaces table). If that's the case, you'll have to add the bridge interface to the LAN interface list, not the individual slave ports.
OP Self-Reports Incompetence but willing to Learn
( aka what am I doing wrong should be the first instinct, as opposed to, its the routers fault.
The first rule of MT should be, approach configuration with humbleness, 99.9 errors are operator error )
