Keeping the internet out is only the beginning of what my firewall does.
Four IP addresses and one failed port forward finally made it click.
The OpenWrt project has released updated versions that fix security vulnerabilities, some of which are classified as critical risks.