DNAT works for port 8080, does not work for port 80 (cloned rule)

Hi,

I have a very frustrating problem. I have a DNAT rule forwarding port 80 to our webserver, which does not work. When I clone the rule and swap port 80 with port 8080 it suddenly works.

I ticked Automatic firewall rule and Log initial packets and also enabled Log traffic in the auto-created firewall rule.

I tried to query the web server over port 80 and 8080.

The ONLY THING I see in the Firewall Live Log is the successful attempt to access port 8080. All access to port 80, which doesn't work, isn't even logged!

Edit: I moved rule #3 to position #1 but it didn't change anything. Web Protection > Web Filtering is OFF.