A closed port is what should be showing, the fact that it is visible indicates it is being seen from the Web.
A port that does not show at all would be a different matter.
a. forward rule not present need to add to config OR
b. NAT rule has narrowed down allowed IPs by source address and this renders the port invisible to scans (normal behaviour).
Your pics do not show the necessary forward chain firewall rules but I am assuming it is in place (as covered off by default rules).
Call a friend and ask to try out whatever your service you are providing as a test!!!
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)