Block all ports except some common used can increase security for your LAN.
We can implement it in port filter.
In this case, we block all ports except ftp,telnet,smtp,dns,dncp,http,pop3,netbios,imap,https.
Please add or delete any port as you needed.