need help - deactivate webaccess via WAN

[bloedefrage]

Hello,

i use a Asus WL 500 g V2 with the newest Oleg Firmware.

i ve installed openvpn (still working) and lighttpd (inactive)

ps shows the following:
PID Uid VmSize Stat Command
1 admin 636 S /sbin/init
2 admin SW [keventd]
3 admin SWN [ksoftirqd_CPU0]
4 admin SW [kswapd]
5 admin SW [bdflush]
6 admin SW [kupdated]
7 admin SW [mtdblockd]
61 admin 408 S syslogd -m 0 -O /tmp/syslog.log -S -l 7
62 admin 520 S nas /tmp/nas.lan.conf /tmp/nas.lan.pid lan
65 admin 364 S klogd
67 nobody 464 S [dnsmasq]
68 admin SW [khubd]
76 admin 344 S rcamdmain
84 admin SW [usb-storage-0]
85 admin SW [scsi_eh_0]
99 admin 480 S watchdog
102 admin 344 S ntp
110 admin 480 S dropbear -s
127 admin 440 S udhcpc -i vlan1 -p /var/run/udhcpc0.pid -s /tmp/udhcpc
128 admin 736 S dropbear -s
129 admin 576 S -sh
146 admin SW [kjournald]
164 admin 1456 S /opt/sbin/openvpn --cd /opt/etc/openvpn --daemon --log-append /var/
193 admin 560 S httpd vlan1
197 admin 392 R ps


When i use the official IP (via dyndns) i am able to login via web access (where i can configure my router) (browser: xxxx.dyndns.org). How can i deactivate it? I will just login via VPN or from LAN.

i disabled the "Web Access from WAN" (Internet Firewall - Basic Config).


Thanks for your answers....

bloedefrage

[al37919]

test it from outside, not from LAN

[bloedefrage]

Thanks for your advise.

I tested it from outside right now.

i added a iptables rule and now a webaccess via WAN (vlan1) isn't possible anymore...
iptables -I INPUT -i vlan1 -p tcp --dport 80 -j DROP

Isn't there a solution without iptables?