Sol
Storage is cool
I'm not sure that rule is right (If the source is the wan then shouldn't the dest_ip be the routers external ip?) but I'm not entirely sure it's needed.
If you're using luci you could just install the luci firewall app and configure the rules with that instead. It might be simpler.
If you're using luci you could just install the luci firewall app and configure the rules with that instead. It might be simpler.