Anti-lockout rule in Port Forward?

[eponymous]

Hi there,

Perhaps I haven't woken up enough yet but I can't figure out why the WebGUI anti-lockout rule appears as a "Port Forward" rule rather than a standard Firewall rule? I've got a LAN interface with NAT enabled.

What does port forwarding / NAT have to do with locally accessing the WebGUI from the LAN interface? Port forwarding is normally used to allow access to a web server on the network from the WAN side right?

I'm obviously missing something here

Thanks.