Does the Draytek block incoming from WAN as default?

I have a 2862n and I cannot find any rules under the Firewall section for an implicit deny all incoming traffic? I cant see any Draytek documentation saying this either, however I have seen others posts say it is blocked by default? Is there anyway to see this within the web interface?

Under Firewall general settings there is "Block incoming connections initiated from ipv4" and this is unchecked, should this be enabled or is this more talking about local ip addresses say on the VPN? The same setting for ipv6 is checked.