Suggested firewall configuration?

I've just set up my NAS and with it running a VPN client to my VPN provider, where I'd like all incoming traffic blocked except for web (port 80) and torrent traffic (port 23877)

How can I accomplish this?

Thanks in advance