Hot answers tagged routing
I think that you have the answer to your question in the firewall rules. From your network diagram it's reasonable to expect that your ISP has access to the Wi-Fi bridge that they provide, so if a host is accessible from there, it's likely he can access it. In your rules, as you mention rule 60 seems out of place. Rule 61 looks like a standard rule ...
Only top voted, non community-wiki answers of a minimum length are eligible