edgerouter-firewall

 default-action drop
 description "WAN to router"
 rule 10 {
     action accept
     description "Allow established/related"
     state {
         established enable
         related enable
     }
 }
 rule 20 {
     action accept
     description "Allow remote access"
     destination {
         port 80,443
     }
     log enable
     protocol tcp
     source {
         address 46.182.XXX.XXX
     }
 }
 rule 30 {
     action accept
     description "Allow local access"
     destination {
         port 80,443
     }
     log disable
     protocol tcp
     source {
         address 192.168.4.1/24
     }
 }
 rule 40 {
     action accept
     description "Allow remote access MrChillax"
     destination {
         port 80,443
     }
     log disable
     protocol tcp
     source {
         address 80.56.XX.XXX
     }
 }
 rule 50 {
     action accept
     description "Allow SSH router"
     destination {
         port 22
     }
     log disable
     protocol tcp
     source {
         address 46.182.XXX.XXX
     }
 }
 rule 60 {
     action accept
     description "Allow IKE"
     destination {
         port 500
     }
     log enable
     protocol udp
 }
 rule 70 {
     action accept
     description "Allow L2TP"
     destination {
         port 1701
     }
     log enable
     protocol udp
 }
 rule 80 {
     action accept
     description "Allow ESP"
     log enable
     protocol esp
 }
 rule 90 {
     action accept
     description "Allow NAT traversal"
     destination {
         port 4500
     }
     log enable
     protocol udp
 }
 rule 100 {
     action drop
     description "Drop invalid state"
     state {
         invalid enable
     }
 }