Firewall rules conundrum

I had to take out (leave empty) the source 80 and put in only the NAT 80. Then it worked.
That’s confusing…