gfunkdave wrote:No, you're not following. 192.168.4.1 is the router's LAN IP. I just want to be able to SSH into the router from the LAN on port 22 and form the WAN on port 443 (but not 22).
Right now I can SSH into the router from both WAN and LAN on 22, and from WAN on 443. I don't want to be able to SSH from the WAN on 22.
The logic is to forward local port 443 to localhost(or 127.0.0.1) port 22 and block all WAN(interface) request on port 22.
If that's complicated move ssh on port 443 and create a portforward on LAN side from port 443 to 22 destination your server private IP.
Regards,
PS. I hope that make sense to you.