Further to a similar thread: http://www.linksysinfo.org/portal/forums/showthread.php?t=48346&highlight=firewall+forward It appears that any port forward rules will add the access rules at the top of the chain. These rules are hidden from the user. This means that any access rules you might add have no effect on the rules added by the port forwarding. Example: I add a subnet as blocked on WAN1 but that same network is still allowed in via any port forwards. Kinda defeats the purpose of the access rule. Or I might want to limit a port forward to a single outside source (I add the allow rule then a deny all rule). Although I'd prefer to have to add all the rules myself I understand why Linksys does it the way they do. So perhaps this is a feature request or idea request in case I'm missing a trick that I could be doing. What if the associated access rules done when a port forward rule is added that those rules are logically placed *after* any custom rules a user might add and *before* the default rules at the end? Even better if those rules were visible and editable in the interface.