Port forwarding on a hardware firewall

[Cornelius Nubston]

Hi there so im running into an issue my data center provides me with a heavy duty hardware firewall and id rather us something like that over wireguard or honeypots but im running into an issue where i can update plugins or even download plugins incoming traffic is also seeming to be blocked and well i dont want to open port 80 and 443 to the public until ive managed to change the port for webui but i pretty much have 2 rules in the firewall Allow all to me discard everything to everyone else on the host unraid host my question is what kinda firewall rule can i create to make it so things like updates can still work without opening up my box im been extra wary as in the last 4 months ive tried just blocking the web ports disabling ssh/telnet etc and even block there ports disable smb and nfs  so the onyl way to stop the xmr miners ending up on my box is to full lock down like this but then i cant do basic tasks like updates

 

Edited April 21, 2021 by Cornelius Nubston
wrong image accidenlty revealed my ips and puttign note for moderator to move post as posted in wrogn section and cant make a new post currently