according to here: OpenWRT · Wiki · Legacy / Trac · GitLab
change /etc/config/firewall and /etc/firewall.user
then reboot