There’s no longer a need to block 3074 in the firewall:
In the Xbox One interface, Network > Advanced settings > Alternate port selection (make sure the consoles are all set to use different ports)
Also, I see from your screenshot that “Deny access to UPnP & NAT-PMP by default” is not checked; you should check that so only authorized devices can use UPnP.