...but not at the router. I have the cable modem into a ppro 200 acting as firewall/webserver.
Script is simple. Block everything.
Cable modem provider looks for specific open ports...80 is not one of them...the ones @home and now comcast hit are 67, 68 and 119.
I have the firewall set to reject all packets...though portsentry shows the ports as listening on a portscan.
There are almost no services besides httpd running on the box.