• Forwarding still has 25565 both ways
• They still can't connect
Are there any firewalls that come to mind that would immediately prevent this from working? I have Windows Defender fully disabled & I haven't changed anything in the above screenshots. I tried turning on dynamic IP in the past but it crashed my router and forced a hard reset.
With the server running, try using a port forward testing website to see if it is open.
Just to clarify, you changed the routers inbound and local ports to be 25565-25565, changed the server port to 25565, you are sure that the windows firewall is disabled or is allowing port 25565 on tcp and your friends are trying to connect to [your public ip]:25565?
If all of that is true and they still can't connect, you might be behind Carrier grade NAT (CGNAT). To verify this, check if your routers public ip (WAN ip) is the same as the ip that you get when you google what's my ip. If they are different, then you are behind CGNAT.