Reject WAN zone input traffic?

I don't follow you. All these exist in a frame. You cannot have just some sort of frame with TCP segment and without IP header.
But still, the default policy tells what action will be applied to the packet that has not been matched by a rule.