In this example we will block all ports and open only RDP port 3389, the direction is from WAN TO LAN (incoming).

The example below was taken from a 2820 router but it should be the same as the other models.