If you haven't got a webserver then these should be closed.
If it is a router then grc will be scanning the router not the machine NAT'd behind the router.
These ports are probably open because the router most likely has a remote administration portal - this should be selected off if possible so that the router cannot be configured from the web (from his own confessions of understanding I would imagine he wont want the remote config operability).