If I have one device (192.168.12.5) on LAN interface that I want to prevent from accessing the internet and i put a rule (top rule #1) on LAN interface to:
Block
Protocol Ipv4*
Source 192.168.12.5 Port *
Destination ANY Port * Gateway *
The rule works and the machine cannot access the internet. But why does the following not work on the LAN interface?
Block
Protocol Ipv4*
Source 192.168.12.5 Port *
Destination WAN_net Port * Gateway *
Everywhere I have seen online shows the same technique for doing this (set destination to any). Why is this? I'm trying to block traffic from exiting the WAN from that IP. I would think that would mean my destination should be WAN net.