You would need a firewall to provide any type of blocking or port forwarding. Most routers provide some basic ability to do this but it’s hit or miss and depends on the manufacturer. I came from a modded merlin asuswrt Asus router firmware to an opnsense firewall running on custom hardware.