according to here: OpenWRT · Wiki · Legacy / Trac · GitLab

change /etc/config/firewall and /etc/firewall.user

then reboot