Block access from WAN but not from LAN
Solved the problem:

In the firewall options dialog (attached along with the question) there's another entity 'httpd' which was set to "Block incoming connections". Setting it to "Allow incoming connections" did the trick.

I do not know where it's coming from though.