Add to the end of: /etc/config/firewall

config rule
	option name 'Allow-Admin-Wan'
	list proto 'tcp'
	option src 'wan'
	option dest_port '22 80 443'
	option target 'ACCEPT'
	option enabled 'true'

Restart firewall: /etc/init.d/firewall reload