Blocking Ports of NVR4108-4KS2

[Jeremy Adams]

Hello I have been using the following NVR from Dahua NVR4108-4KS2 and its been great. I was able to block my cameras from the internet via the Tomato Access restrictions tab. I can see my cameras via VPN and I also receive ntoifications from the NVR. I had one question though. I wanted to lock down the NVR more and block it from the internet but only allow port 123 for the time updates and port 2195 for the push notifications. Does anyone know how to do this with Tomato? I dont see an option to block all ports but leave these open as an option. It looks like I have to list all the ports via a range? Or should I even worry about locking down the NVR this much?

Thanks

Jeremy