config zone option output 'ACCEPT' option name 'InternetOnly' option network 'guestlan' option input 'REJECT' option forward 'REJECT'config forwarding option dest 'wan' option src 'InternetOnly'config rule option target 'ACCEPT' option name 'Allow DNS' option src 'InternetOnly' option dest_port '53'config rule option enabled '1' option target 'ACCEPT' option name 'Allow DHCP' option proto 'udp' option src 'InternetOnly' option src_port '67-68' option dest_port '67-68'config rule option src 'InternetOnly' option target 'DROP' option name 'Deny Access to the router'config rule option src 'InternetOnly' option dest 'lan' option name 'Deny Guest -> LAN' option proto 'all' option target 'DROP'config rule option target 'ACCEPT' option src 'InternetOnly' option dest 'wan' option name 'Allow Guest -> WAN http' option proto 'tcp' option dest_port '80'config rule option target 'ACCEPT' option src 'InternetOnly' option dest 'wan' option name 'Allow Guest -> WAN https' option proto 'tcp' option dest_port '443'config rule option src 'InternetOnly' option dest 'wan' option name 'Deny Guest -> WAN' option proto 'all' option target 'DROP'