[luci] Firewall

[Steven Barth]

Hi Thomas,
sure thats easy: go to Administration -> Network -> Firewall -> Zones
and set the default actions for your external zone for incoming (and/or 
forwarded) traffic to "reject" and for your internal zone to "accept" or however 
you like it.

Then to add an exception for port 22 on the router go to: Administration -> 
Network -> Firewall -> Traffic Control and create a new custom rule:

* Source: external zone
* Target: device
* Protocol: tcp (can be found under "additional fields")
* Destination Port: 22 (appears after setting protocol to tcp)
* Action: Accept

Cyrus