Disable EdgeRouter Lite GUI on DMZ interface

Solution 1:

I've been able to do this by changing the ip address where the gui listens. I'm sure it might be good to additionally set up some firewall rules for this. Here is what worked for me on the CLI.

configure
set service gui listen-address 10.0.0.1
set service ssh listen-address 10.0.0.1
commit
save
exit

By default, the IP address for eth1 is 192.168.1.1, so you may have to change the above to point to the ip address of your LAN's gateway (interface's IP address).