I can't block port 3141 with traffic rule

@LeandroCorrea, change the destination port to match the internal port.

@mk24, the rule order for DNAT is correct by default.
Only the RELATED/ESTABLISHED need to be fixed as mentioned above.