Try the experiment suggested above: start a large file transfer using the DDNS address, and, while the transfer is underway, physically disconnect the WAN cable from the router. If the file transfer continues, then clearly nothing is being sent out the WAN port to the internet.
