n66u port range exception command line

router : N66u / latest merlin firmware how can I block all ports for one ip address (i.e. 192.168.1.33) by default,and then add exceptions. specificly its an IOT device,which offers management via vnc and app. For the vnc part I use a script (sent via ssh command beforehand) to enable/disable...