I can confirm that I am in bridge mode with my own firewall (Sophos) behind the Rogers modem and inbound traffic is not reaching my firewall. I did the same tests as you with nmap and I did not get "admin-prohibited" but I did receive "no-response". ...
