I have a OpenWRT installation which I'm currently hardening. I'd like to prevent all network access from LAN devices to the router, except for TCP 22, TCP 80, and TCP 443.
I'm using LuCI, and here are the general settings:
Here are the traffic rules:
Presently, all incoming traffic from the WAN is rejected except for remote TCP 22, TCP 80, and TCP 443. However, it would appear that all traffic from the LAN to the router is accepted.
How can I (safely) reject all traffic from the LAN to the router except for TCP 22, 80, and 443?