I've found something in my routers firewall settings called NAT endpoint filtering. It has UDP endpoint filtering and TCP endpoint filtering, they both have the three options of "Endpoint independent", "Address Restricted" and "Port and Address Restricted". Should I set both to "Endpoint independent"? And would a firewall program be enough to keep the laptop atleast somewhat safe if I set it as a DMZ host?