Shields UP! Shows port 80, 443 as OPEN rather than Stealthed

Sup all! Hopefully this is an easy one for you smarty-panties.

Just upgraded from the ISP router to OPNSense on an old Qotom box, nothing fancy. Massive learning experience, but in short, I got it in place and online and it looks good.

I've used Shields UP! before ([see it here](https://www.grc.com/x/ne.dll?rh1dkyd2)) to test networks from the outside, and aim for a Pass. Old router achieved this. Now, with OPNsense in place, I'm getting 'open' on ports 80 and 443. I also had ICMP Echo replies, but i've successfully fixed that in rules.

I'd like to match the router's security by having all ports in stealth mode, but searches online only ever return queries about port forwarding, which I don't think I need here. This is simply putting matching secure rules in place on WAN, as far as I can see - I just need my network the same as before beyond that point. Anything I need accessible from the outside is on Tailscale, so that's enough for me.

Anyone able to help explain to me how to 'stealth' those ports? Cheers!

**EDIT:**

I think, through either accidentally cloning default rules or when restoring previous configs, I ended up with, essentially, 'allow anything' rules on floating/WAN. Per the below comments, I disabled them all and now pass the test. Whew - thanks everyone! You can find screenshots from me, as well as a known-good instance, in those comments below.