Re: ERL interface at public ip

you can set the GUI listen interface to only listen on an internal interface - such as your LAN. 

You can also change the listen-on ports:

set service gui listen-address 192.168.150.250  << set this to a LAN interface address
set service gui http-port 80   << set this to whatever you want
set service gui https-port 443 << set this to whatever you want