Are you on AT&T’s fiber service?
It does not use CG-NAT addressing.
In your port forward statement, the Public IP is blank (or all/any, depending on device).
If you’ve a BGW-320 router, see Changed ISP - No Remote Access with AT&T BGW 320-500 - #3 by FordGuy61. Substitute your server for the WD NAS.
If you’ve the same router, you do not need to configure firewall rules. All you need is the port forwarding rule.