i have a really strange one.
i have a configured hap ac2 with capsman controlling the local radios.
the default firewall rules are in place.
i have found that if i have enabled the default rule block everything not coming from the lan
then when the router reboots the wireless interfaces keep looping and incrementing their cap number but are not able to make a stable connection to capsman to get their config.
interface list ! (looks like an exclamation in the checkbox) Lan
no other config
With this rule disabled though a shields up scan reveals ports 21 22 23 and 80 open.
How can i block those ports but still enable capsman operation on reboot?