Hmm sounds like your ports config must be awry.
You should prob dedicate some of the ports to the LAN and only allow the wifi to communicate with hosts connected to the LAN interfaces vice versa and not the WAN for security purposes.