Anthony Weiner approves.
IO ports into a router from the ISP and IO ports OUT of a router to the ISP can be blocked with the advanced setup page on most higher-end routers. It’s firmware blocking so there is no software that can feel its way around it.