This looks like an FAQ item :-) I'll have a look at the wiki.
On Oct 10, 2012 7:22 PM, "Dave Taht" <dave.taht@gmail.com> wrote:

> Several ports are open, but filtered, using various means. Does this
> tool not show filtered?
>
> For example, rsync and ssh are enabled but the default settings in
> /etc/xinetd.conf prohibit access via any but your internal private
> ips.
>
> Telnet and ftp ports (not services) are enabled, but are there to
> trigger sensors to disable other services in the advent of an attack
> from inside or outside of your firewall.
>
> You can close ports more fully to the outside world via the gui,
> editing /etc/config/firewall and/or do finer grained access control
> via /etc/xinetd.conf and /etc/xinetd.d/
>
> The web port (80) defaults open, the web configuration port (81) does
> not. The intent here is to enable you to put up your own local web
> pages.
>
> See the onboard and wiki documentation for more details.
>
> Thx for trying cerowrt!
>
> On Wed, Oct 10, 2012 at 8:44 AM, Shannon Kendrick
> <shannon@kendrickonline.org> wrote:
> > What's the best resource for learning how to configure the firewall to
> close the ports that are open by default?  I installed 3.3.8-26 "sugarland"
> into a brand new WNDR3800 to be used as my home router, and I immediately
> ran ShieldsUp!! (grc.com) and noticed open ports.  However, I'm at a loss
> as to how to close them.
> > Thanks,
> > Shannon Kendrick
> > _______________________________________________
> > Cerowrt-devel mailing list
> > Cerowrt-devel@lists.bufferbloat.net
> > https://lists.bufferbloat.net/listinfo/cerowrt-devel
>
>
>
> --
> Dave Täht
>
> Fixing bufferbloat with cerowrt:
> http://www.teklibre.com/cerowrt/subscribe.html
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
>