also set this using telnet
ip config natloopback=enabled

Telnet into the router and run:

:service system list expand enabled name HTTP

Amongst other things, you will see:
Interface Group Access List lan wan

run:
:service system ifdelete name HTTP group wan

Repeat this for HTTPs, FTP and HTTPI

in the end run
:saveall