The firewall section on the router, is actually doing some port forward etc.
For leak protection, don’t do anything in the firewall section.