The ping enable trouble was nothing to do with the rules or their persistence. It was the DoS denial of servicel. After a reboot all worked for a a tiny period and then stopped working . After some thought I then turned off the DoS protection. All was then fine. With DoS back on and then a repeat of the shields up test showed two immediately successive Shields up on the common ports caused Shields up to be blocked and falsely (but correctly) give stealth. Likewise the pings from TBB and UNO were seen are D0S attacks.
I suspect I should have be more alert

to DoS and ping tests issues but I don't recall having this trouble with past devices.