Airport Extreme is allowing access to screen sharing, file sharing from external IP addresses (some from China, Canada etc)

How to get control over the ports/port forwarding etc in Airport Extreme?

How to make AE drop packets to certain ports from external ports. Or create whitelist/blacklists?

I figured out where the MAC filtering is! (It is inside the Timed Access Control). I wish it had a list of connected device and allowed me to select, name and add them.

I am getting requests from Chinese IP to the screen sharing ports forwarded to my iMac. Had requests to other ports as well. There was one IP address from CANADA too.

I want to open file sharing for local use only.