Hi OP, someone using nmap would have a fun time trying to find any open ports to exploit.

Deny outside access to the core management interfaces. Ne'er-do-wells from the .cn domain trying to hack my router can fuck right off.