@Crossbow 

Do you have the HomeCare antivirus features enable?  If so what is the history log showing?  Is your NAS local only or do you have it listed in the DMZ of the router?  If its in the DMZ that effectively opens all ports so you should remove that and just open the ports you need to access it.   

  @Crossbow I responded several times through email but apparently that does not go through to you guys. I am still interested in a way to block domains using ACL's etc in the firewall. There is not enough control over who is able to get through my router. If you guys are not going to implement something like that on the router I will need to replace it with one that can. I love the router and the range it provides so I really am hoping not to have to do that. 

  @Kevin_Z Yeah I agree that it has blocked that IP for that exploit but that is not enough. I want punative measures that if a domain continues to try or tries a way that the virus software doesn't identify I can block their IP address or even to their entire domain. There is just not enough information or control in using that Virus embedded firewall for a power user. I have purchased a seperate hardware firewall since this router can't do it.