@MR.S 

Thanks for your reply!

I have done the following:

but unfortunately, it still seems to be blocked.

Additionally, I tried to update the Service Type to have source ports 0-65535, and destination ports 8096-8096:

but still blocked.

So far the only config I have succeeded with is using separate Service Types for everything before port 8096 and everything after:

however this will quickly become difficult to manage if/when I need to allow ports for other services.

  @Memran 

I'm not familiar with how it's done in stand alone, I use controllers and it's a bit of a different way to configure. But like I said, rules are read from top to bottom and are actually pretty simple, I don't know how to create service groups. I recommend you look in the router's user manual.

  @MR.S 

Actually, your solutiomn was correct! While I was playing around with my vlan tags (for a totally different reason) I misconfigured it, at the same time as doing what you suggested!

My appologies for the confision!

I've marked your first reply as a solution.

Thanks! 

  @Memran 

👍