Thanks for you input about security, i edited the #1 Rule with icmp and set under Extra the Limit Rate to 10/s.
I let Burst at default 5. Hope this settings are correct
#3 Rule is Drop In.Interface ether1-gateway. Should i switch here to pppoe-out1?
Yes. Use the actual WAN interface. In fact, change this in every rule wherever it says ether1 - change it to pppoe-out. Ether1-gateway is just a physical port with no IP configuration on it. It's simply a vessel to carry the pppoe frames to/from the pppoe server. As far as IP and the firewall are concerned, ether1-gateway is never even used.
As for the ICMP rule, you might make burst a little higher than 5 - if you do a traceroute or something, it's going to generate more ICMP. I'd say play around and as long as everything's working in normal conditions, then you're fine.
I googled now what Port Upnp is using and i found out its 1900 and so i testet the sniffer tools from the tools functions.
I filtered the connections for the UDP 1900 Port and my source IP. There are packages when i start the upnp request on my computer but nothing happens on the router. Any idea?
Here is the screenshot
Whatever interface is your LAN interface, make sure there's a rule in the input chain which allows all traffic on that interface. Furthermore, if there are rules in output (these are more rare, but they do serve a purpose) then make sure they're not blocking anything heading out-interface= your lan interface
Almost certainly, there's a lan-bridge interface with ports = wlan1 and ether6-master (I sense that you're using a 2011 model). Basically, ether3 - ether5 should have master = ether2, and ether7 - ether10 should have master = ether6
Then the LAN bridge has ports = wlan1, ether2, and ether6.
The LAN bridge is your ACTUAL lan interface.
No firewall rule should mention any of the physical ethernet / wlan interfaces (unless you're using bridge filtering also, but that's more advanced so if you don't know what it is or aren't sure, then you're not). Your firewall should only have rules about interfaces that also have IP addresses on them.
Likewise, the only interfaces you need to enable for UPnP are pppoe-out and the LAN bridge. The physical interfaces are basically just dumb switch ports.